General

  • Target

    0cdecdc8ee7ab093f2701d724001c6ed624be8e4c095c40566b1607258746409

  • Size

    50KB

  • Sample

    240612-kv8cxswgqf

  • MD5

    dec23215e5b60b0d8c9530608fceacf5

  • SHA1

    330e13940d1f01538860ba0af81e6d2c070fd08d

  • SHA256

    0cdecdc8ee7ab093f2701d724001c6ed624be8e4c095c40566b1607258746409

  • SHA512

    be7cbed058bc686daa983b38561368abad76a18d2444def0d5055a10b3311cfc11865ae7f470326b1ce2daff57c8b96465f7abd900de04d843d011c4477b2b44

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o52JYH:W5ReWjTrW9rNPgYo0JYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      0cdecdc8ee7ab093f2701d724001c6ed624be8e4c095c40566b1607258746409

    • Size

      50KB

    • MD5

      dec23215e5b60b0d8c9530608fceacf5

    • SHA1

      330e13940d1f01538860ba0af81e6d2c070fd08d

    • SHA256

      0cdecdc8ee7ab093f2701d724001c6ed624be8e4c095c40566b1607258746409

    • SHA512

      be7cbed058bc686daa983b38561368abad76a18d2444def0d5055a10b3311cfc11865ae7f470326b1ce2daff57c8b96465f7abd900de04d843d011c4477b2b44

    • SSDEEP

      1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o52JYH:W5ReWjTrW9rNPgYo0JYH

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks