General

  • Target

    f2af03007bbd23a6255aeea7a920d705e43f62f6c55bcb9f6c212b15c402a9af

  • Size

    899KB

  • Sample

    240612-b3lz8axhrh

  • MD5

    5110eb454e2c780b891814ac9060506e

  • SHA1

    4b05534ee2194eee2c000c79d6771aa9001911af

  • SHA256

    f2af03007bbd23a6255aeea7a920d705e43f62f6c55bcb9f6c212b15c402a9af

  • SHA512

    17a9dc8952ff6eca7f8fde9c95f634dea5e81c375787ca705ddc90647eb69efe72138038c07d2d786768526c5a39f6eaa458622f5b258ad3052d20ca1ba97f10

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f2af03007bbd23a6255aeea7a920d705e43f62f6c55bcb9f6c212b15c402a9af

    • Size

      899KB

    • MD5

      5110eb454e2c780b891814ac9060506e

    • SHA1

      4b05534ee2194eee2c000c79d6771aa9001911af

    • SHA256

      f2af03007bbd23a6255aeea7a920d705e43f62f6c55bcb9f6c212b15c402a9af

    • SHA512

      17a9dc8952ff6eca7f8fde9c95f634dea5e81c375787ca705ddc90647eb69efe72138038c07d2d786768526c5a39f6eaa458622f5b258ad3052d20ca1ba97f10

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks