General

  • Target

    2734b284204c66bee3b38b2464ac6e051211c8b70f530dc8e19504c0229ad15a

  • Size

    899KB

  • Sample

    240619-d15qnaxdqp

  • MD5

    90471f65fb44b0dab929cfde605c6a50

  • SHA1

    676ff69dc93de1b23bbea8eb4b6d62ee63ce6579

  • SHA256

    2734b284204c66bee3b38b2464ac6e051211c8b70f530dc8e19504c0229ad15a

  • SHA512

    7c1905cb75c6a6740b13a913ebc7b50a8aa1ecdde9c014e51df3a1e80302d20f37f96d47f633da1dee8b72349a14b8031f8c148aa7990c8dbcfc2778050ba6d3

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXQ:7wqd87VQ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2734b284204c66bee3b38b2464ac6e051211c8b70f530dc8e19504c0229ad15a

    • Size

      899KB

    • MD5

      90471f65fb44b0dab929cfde605c6a50

    • SHA1

      676ff69dc93de1b23bbea8eb4b6d62ee63ce6579

    • SHA256

      2734b284204c66bee3b38b2464ac6e051211c8b70f530dc8e19504c0229ad15a

    • SHA512

      7c1905cb75c6a6740b13a913ebc7b50a8aa1ecdde9c014e51df3a1e80302d20f37f96d47f633da1dee8b72349a14b8031f8c148aa7990c8dbcfc2778050ba6d3

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXQ:7wqd87VQ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks