General

  • Target

    fe8ff7b60f1c7fc1088c7c77a735b7707c5aaec175532e497b6fbad805c15f75

  • Size

    899KB

  • Sample

    240609-nqmgfaaa7t

  • MD5

    1a680b378db10f26f1f11a9dcc0312e8

  • SHA1

    5b40460c92230037d91065a1acfa353602f9b168

  • SHA256

    fe8ff7b60f1c7fc1088c7c77a735b7707c5aaec175532e497b6fbad805c15f75

  • SHA512

    c1154b9f742ea38d6880470df26c9d1aeb691662b82634c8a52117805cfac63f99f1b87b27c1f9eaeb834120b2866839b63b265ff1750b8dce7998f447605093

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      fe8ff7b60f1c7fc1088c7c77a735b7707c5aaec175532e497b6fbad805c15f75

    • Size

      899KB

    • MD5

      1a680b378db10f26f1f11a9dcc0312e8

    • SHA1

      5b40460c92230037d91065a1acfa353602f9b168

    • SHA256

      fe8ff7b60f1c7fc1088c7c77a735b7707c5aaec175532e497b6fbad805c15f75

    • SHA512

      c1154b9f742ea38d6880470df26c9d1aeb691662b82634c8a52117805cfac63f99f1b87b27c1f9eaeb834120b2866839b63b265ff1750b8dce7998f447605093

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXH:7wqd87VH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks