General

  • Target

    87a3758488c9e31a23be6c086b15ff0d4c5ac3825d72b5e86fea4f63262b3c99

  • Size

    899KB

  • Sample

    240613-fkdncaydmm

  • MD5

    0a1875c317613e6cbfec1374a5f82738

  • SHA1

    6edd92a8983d6f1f60cd5172a11bfdc39198c557

  • SHA256

    87a3758488c9e31a23be6c086b15ff0d4c5ac3825d72b5e86fea4f63262b3c99

  • SHA512

    25d2def8f4291ab2210e961b34c4dc9606010c660f8afbc1bb378bbafec6e893becbf5f3ff4e5a0fd47bca9e9b0c8c7ed945cc5af67e670008bfcc69381f93b8

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXr:7wqd87Vr

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      87a3758488c9e31a23be6c086b15ff0d4c5ac3825d72b5e86fea4f63262b3c99

    • Size

      899KB

    • MD5

      0a1875c317613e6cbfec1374a5f82738

    • SHA1

      6edd92a8983d6f1f60cd5172a11bfdc39198c557

    • SHA256

      87a3758488c9e31a23be6c086b15ff0d4c5ac3825d72b5e86fea4f63262b3c99

    • SHA512

      25d2def8f4291ab2210e961b34c4dc9606010c660f8afbc1bb378bbafec6e893becbf5f3ff4e5a0fd47bca9e9b0c8c7ed945cc5af67e670008bfcc69381f93b8

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXr:7wqd87Vr

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks