General

  • Target

    573962875afe9529375d9dc9b204b34259c99a5d5af1d150e58bc5aee481c82f

  • Size

    899KB

  • Sample

    240611-kfg77a1dpn

  • MD5

    5c1bb964e00aa9fc9e1e112376b9234d

  • SHA1

    1b5497719ab7495e38b3b353be4140dfe3c9138b

  • SHA256

    573962875afe9529375d9dc9b204b34259c99a5d5af1d150e58bc5aee481c82f

  • SHA512

    76e039c324a9a23f3bae68993a2aceae8535cd7ebadd41e87bc04e707b09df6ed817906c80eac523c2d37e51f14216885d366e71ece6adb2d244dd62fd7dfb56

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      573962875afe9529375d9dc9b204b34259c99a5d5af1d150e58bc5aee481c82f

    • Size

      899KB

    • MD5

      5c1bb964e00aa9fc9e1e112376b9234d

    • SHA1

      1b5497719ab7495e38b3b353be4140dfe3c9138b

    • SHA256

      573962875afe9529375d9dc9b204b34259c99a5d5af1d150e58bc5aee481c82f

    • SHA512

      76e039c324a9a23f3bae68993a2aceae8535cd7ebadd41e87bc04e707b09df6ed817906c80eac523c2d37e51f14216885d366e71ece6adb2d244dd62fd7dfb56

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXt:7wqd87Vt

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks