General

  • Target

    f8d64616a9f786f13c73d86d6b1b8e4e8a2359f31e6534840f3ce214dba525ce

  • Size

    899KB

  • Sample

    240619-3jjjja1fml

  • MD5

    05044728c9513f0ce6b6f839794da78d

  • SHA1

    ec06d819196db3949d9a8233bb3a8513be5333f1

  • SHA256

    f8d64616a9f786f13c73d86d6b1b8e4e8a2359f31e6534840f3ce214dba525ce

  • SHA512

    7387a76ab1b6eb63fbc5d63e5b316e9e66706715d45b0d299f399d0825501572ec8eda280c5c529751c4b7f61d7e78f5964fbf07baf17e170b5672d76dcc50da

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f8d64616a9f786f13c73d86d6b1b8e4e8a2359f31e6534840f3ce214dba525ce

    • Size

      899KB

    • MD5

      05044728c9513f0ce6b6f839794da78d

    • SHA1

      ec06d819196db3949d9a8233bb3a8513be5333f1

    • SHA256

      f8d64616a9f786f13c73d86d6b1b8e4e8a2359f31e6534840f3ce214dba525ce

    • SHA512

      7387a76ab1b6eb63fbc5d63e5b316e9e66706715d45b0d299f399d0825501572ec8eda280c5c529751c4b7f61d7e78f5964fbf07baf17e170b5672d76dcc50da

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks