General

  • Target

    d639d258869b682a300a62c98695b69b25f6d0ece0a3fe582fe6e69f04a7ec40

  • Size

    899KB

  • Sample

    240619-2efreavcnf

  • MD5

    964deb60f8b3a32744067ec80fcce091

  • SHA1

    11e3e13a070f0f2427fde72839f4ee8b4cfd4257

  • SHA256

    d639d258869b682a300a62c98695b69b25f6d0ece0a3fe582fe6e69f04a7ec40

  • SHA512

    5a106bd8e5a74d9a69bd5be67a843c4dcd61ad1854a578672c185cc634b92ce2b55a941e8b0b6fb78b6ad21613cd62d747c713b3af8a86e9d2f3f7dc29af8088

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d639d258869b682a300a62c98695b69b25f6d0ece0a3fe582fe6e69f04a7ec40

    • Size

      899KB

    • MD5

      964deb60f8b3a32744067ec80fcce091

    • SHA1

      11e3e13a070f0f2427fde72839f4ee8b4cfd4257

    • SHA256

      d639d258869b682a300a62c98695b69b25f6d0ece0a3fe582fe6e69f04a7ec40

    • SHA512

      5a106bd8e5a74d9a69bd5be67a843c4dcd61ad1854a578672c185cc634b92ce2b55a941e8b0b6fb78b6ad21613cd62d747c713b3af8a86e9d2f3f7dc29af8088

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX6:7wqd87V6

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks