General

  • Target

    20772c0317b3b673c875fda158e5df4ecd8f4abd3e0dc33084d762990fe1b4fb

  • Size

    899KB

  • Sample

    240609-2egzgafg3v

  • MD5

    93b4e18a611d59383ce1edf81a7e5316

  • SHA1

    d48cb49bc01c7639a83b3589aa3810e02323665e

  • SHA256

    20772c0317b3b673c875fda158e5df4ecd8f4abd3e0dc33084d762990fe1b4fb

  • SHA512

    d1b918965641ca8b65085d90276c2c0fce3a6ba12275efef229bf359a378b20983c7709d94746b300977c8f3824869f73481d1f405fd3d8fe77a76e4e4d7ab30

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      20772c0317b3b673c875fda158e5df4ecd8f4abd3e0dc33084d762990fe1b4fb

    • Size

      899KB

    • MD5

      93b4e18a611d59383ce1edf81a7e5316

    • SHA1

      d48cb49bc01c7639a83b3589aa3810e02323665e

    • SHA256

      20772c0317b3b673c875fda158e5df4ecd8f4abd3e0dc33084d762990fe1b4fb

    • SHA512

      d1b918965641ca8b65085d90276c2c0fce3a6ba12275efef229bf359a378b20983c7709d94746b300977c8f3824869f73481d1f405fd3d8fe77a76e4e4d7ab30

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXY:7wqd87VY

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks