General

  • Target

    3ac10bf72887810cd640f02969a665a5be1ac23542891d9e2346f26461867a91

  • Size

    50KB

  • Sample

    240607-d41acaha6v

  • MD5

    4f8d2f83f4fe7246f2321e3e64fe1e1b

  • SHA1

    b958da380dcbb56b6cc0c0ad5bf64c4b12043f4a

  • SHA256

    3ac10bf72887810cd640f02969a665a5be1ac23542891d9e2346f26461867a91

  • SHA512

    d60d846eb33e402a96f4a49744880ba6ff057d55382d649e1c0490a5b6ee7f45c33c1a6bab185c795c371d1fa70a93b2150ed1caa95e41aa1844d8219a4b842b

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5oJYH:W5ReWjTrW9rNPgYomJYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      3ac10bf72887810cd640f02969a665a5be1ac23542891d9e2346f26461867a91

    • Size

      50KB

    • MD5

      4f8d2f83f4fe7246f2321e3e64fe1e1b

    • SHA1

      b958da380dcbb56b6cc0c0ad5bf64c4b12043f4a

    • SHA256

      3ac10bf72887810cd640f02969a665a5be1ac23542891d9e2346f26461867a91

    • SHA512

      d60d846eb33e402a96f4a49744880ba6ff057d55382d649e1c0490a5b6ee7f45c33c1a6bab185c795c371d1fa70a93b2150ed1caa95e41aa1844d8219a4b842b

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5oJYH:W5ReWjTrW9rNPgYomJYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks