General

  • Target

    ee236aea9301bc23503a0761d38f1c365a9823dc147108bb170ad580ebee5174

  • Size

    899KB

  • Sample

    240604-3kft2aga63

  • MD5

    acf6f09db14ed350f3806550e7bd1a0e

  • SHA1

    c59841c4d8d2d9b5dca6261dd38b27110fb19836

  • SHA256

    ee236aea9301bc23503a0761d38f1c365a9823dc147108bb170ad580ebee5174

  • SHA512

    3d335c2d352674c9663a95b0db857891d7fd084a4f5ce8346bdf4e7f2f7157f412620019ac5acaab70fd681a46b6800eefc760ff357daa368633bcd8802f9c6c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ee236aea9301bc23503a0761d38f1c365a9823dc147108bb170ad580ebee5174

    • Size

      899KB

    • MD5

      acf6f09db14ed350f3806550e7bd1a0e

    • SHA1

      c59841c4d8d2d9b5dca6261dd38b27110fb19836

    • SHA256

      ee236aea9301bc23503a0761d38f1c365a9823dc147108bb170ad580ebee5174

    • SHA512

      3d335c2d352674c9663a95b0db857891d7fd084a4f5ce8346bdf4e7f2f7157f412620019ac5acaab70fd681a46b6800eefc760ff357daa368633bcd8802f9c6c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks