General

  • Target

    44f542135aac22907b182113a9e0302cd73bc7cc98745e1b8734081f45bce608

  • Size

    899KB

  • Sample

    240611-3jp2bawbpa

  • MD5

    9c8527f92d609bd892a3910345d8fb3d

  • SHA1

    b8cbd75fbf4b5567ab873ee22451d044fdb20e24

  • SHA256

    44f542135aac22907b182113a9e0302cd73bc7cc98745e1b8734081f45bce608

  • SHA512

    3d3a7a23650fe3c92f09c2377953d2767507693277e02fecf5a87776dabf12820397aa590140ea97719b2776396cdaf36c255b33ae0aaad84858e508932771cd

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      44f542135aac22907b182113a9e0302cd73bc7cc98745e1b8734081f45bce608

    • Size

      899KB

    • MD5

      9c8527f92d609bd892a3910345d8fb3d

    • SHA1

      b8cbd75fbf4b5567ab873ee22451d044fdb20e24

    • SHA256

      44f542135aac22907b182113a9e0302cd73bc7cc98745e1b8734081f45bce608

    • SHA512

      3d3a7a23650fe3c92f09c2377953d2767507693277e02fecf5a87776dabf12820397aa590140ea97719b2776396cdaf36c255b33ae0aaad84858e508932771cd

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks