General

  • Target

    38b24d9f6a548a27aaa2e6779409f0b671a665a64eab82e20ca3c927677a6c75

  • Size

    899KB

  • Sample

    240612-by1yksxgqh

  • MD5

    7506cd68bc822610f5abdbc9ea32fc31

  • SHA1

    ac4353d4edf2fa6cc2379ef47b6c58b3e08e05c5

  • SHA256

    38b24d9f6a548a27aaa2e6779409f0b671a665a64eab82e20ca3c927677a6c75

  • SHA512

    fb38009c56309aeec6fbfa3d49882186428e24d55546c13cf715a47b03064a02cafc9efd2933a69a55c6a57683ca587ad6b2cb866614c02281dd0d76d35b2e6e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      38b24d9f6a548a27aaa2e6779409f0b671a665a64eab82e20ca3c927677a6c75

    • Size

      899KB

    • MD5

      7506cd68bc822610f5abdbc9ea32fc31

    • SHA1

      ac4353d4edf2fa6cc2379ef47b6c58b3e08e05c5

    • SHA256

      38b24d9f6a548a27aaa2e6779409f0b671a665a64eab82e20ca3c927677a6c75

    • SHA512

      fb38009c56309aeec6fbfa3d49882186428e24d55546c13cf715a47b03064a02cafc9efd2933a69a55c6a57683ca587ad6b2cb866614c02281dd0d76d35b2e6e

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXv:7wqd87Vv

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks