General

  • Target

    51e8003f0b65a467021718d46ac1aeb75e13a0ce0a31f169af9d0d61e6c48a27

  • Size

    899KB

  • Sample

    240605-f61p1agc96

  • MD5

    4e0e502ab6f96483d4d518e3a59eaae9

  • SHA1

    861b4566f4b186c3f32c6ab0f00bb2b3aec8dc25

  • SHA256

    51e8003f0b65a467021718d46ac1aeb75e13a0ce0a31f169af9d0d61e6c48a27

  • SHA512

    bf20a58254a7ce4aaf88a8a3cfbf56a046eaf9401b055a741b976fbb2e7cb5e98893ca0938a80bc8ed81c66e235013c893b2b76d6155b9b001f8ca41f3306905

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      51e8003f0b65a467021718d46ac1aeb75e13a0ce0a31f169af9d0d61e6c48a27

    • Size

      899KB

    • MD5

      4e0e502ab6f96483d4d518e3a59eaae9

    • SHA1

      861b4566f4b186c3f32c6ab0f00bb2b3aec8dc25

    • SHA256

      51e8003f0b65a467021718d46ac1aeb75e13a0ce0a31f169af9d0d61e6c48a27

    • SHA512

      bf20a58254a7ce4aaf88a8a3cfbf56a046eaf9401b055a741b976fbb2e7cb5e98893ca0938a80bc8ed81c66e235013c893b2b76d6155b9b001f8ca41f3306905

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX3:7wqd87V3

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks