General

  • Target

    f9541102083efe970089c8d82083a46f8cfd6e047cce3c0c0ee7c8a05a2bf431

  • Size

    899KB

  • Sample

    240620-wapwmatflj

  • MD5

    ef8adbf9d70e4d588d493ee6926294e7

  • SHA1

    92bc12c00bbc04c968eb489a814af26e02cb00e9

  • SHA256

    f9541102083efe970089c8d82083a46f8cfd6e047cce3c0c0ee7c8a05a2bf431

  • SHA512

    21c864ef4fa99357eec97d88ba85833831b37c66861c5ecca00d60a9108591b40ddec185f3dd24b11ffc165dbc1d5332d4c98394a82cbb953633b3323b7ec84a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      f9541102083efe970089c8d82083a46f8cfd6e047cce3c0c0ee7c8a05a2bf431

    • Size

      899KB

    • MD5

      ef8adbf9d70e4d588d493ee6926294e7

    • SHA1

      92bc12c00bbc04c968eb489a814af26e02cb00e9

    • SHA256

      f9541102083efe970089c8d82083a46f8cfd6e047cce3c0c0ee7c8a05a2bf431

    • SHA512

      21c864ef4fa99357eec97d88ba85833831b37c66861c5ecca00d60a9108591b40ddec185f3dd24b11ffc165dbc1d5332d4c98394a82cbb953633b3323b7ec84a

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks