General

  • Target

    156959a62d3ddfb93e008d7a7cb7673ca717248f483a01cdac53209740f8b654

  • Size

    899KB

  • Sample

    240614-x4wfyawhml

  • MD5

    e7fa9aab1c49328b3eacceff8c48f5fc

  • SHA1

    1347390183dd45b614f238254e920335725ecffa

  • SHA256

    156959a62d3ddfb93e008d7a7cb7673ca717248f483a01cdac53209740f8b654

  • SHA512

    a17dd3995f033410af0f1abf04cb97385a29d2dc9c0ef5ab45050dc7dbe28d320b8ee8500590f524f91c7fc1c23cc1e9844824513c42f85c0d708735ef0cb583

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      156959a62d3ddfb93e008d7a7cb7673ca717248f483a01cdac53209740f8b654

    • Size

      899KB

    • MD5

      e7fa9aab1c49328b3eacceff8c48f5fc

    • SHA1

      1347390183dd45b614f238254e920335725ecffa

    • SHA256

      156959a62d3ddfb93e008d7a7cb7673ca717248f483a01cdac53209740f8b654

    • SHA512

      a17dd3995f033410af0f1abf04cb97385a29d2dc9c0ef5ab45050dc7dbe28d320b8ee8500590f524f91c7fc1c23cc1e9844824513c42f85c0d708735ef0cb583

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXK:7wqd87VK

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks