General

  • Target

    78621ed106aa221c7e6cd3e8f3f9facac5f1142c163afca8eca663de871a660a

  • Size

    899KB

  • Sample

    240623-1mt4bstclc

  • MD5

    bf186860909f0fb021727e709ae616fd

  • SHA1

    4ce3ce8f67ebefe5a304544fe5c1fa0cefc958c3

  • SHA256

    78621ed106aa221c7e6cd3e8f3f9facac5f1142c163afca8eca663de871a660a

  • SHA512

    34dea7684d52234a42400f38ceea69f01b79b885e01820081272f23e3a07d0c3439239c7c9816ed6bdfc6cd0ced8b5b8fc72699c1040df3e791161f9017df2ec

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      78621ed106aa221c7e6cd3e8f3f9facac5f1142c163afca8eca663de871a660a

    • Size

      899KB

    • MD5

      bf186860909f0fb021727e709ae616fd

    • SHA1

      4ce3ce8f67ebefe5a304544fe5c1fa0cefc958c3

    • SHA256

      78621ed106aa221c7e6cd3e8f3f9facac5f1142c163afca8eca663de871a660a

    • SHA512

      34dea7684d52234a42400f38ceea69f01b79b885e01820081272f23e3a07d0c3439239c7c9816ed6bdfc6cd0ced8b5b8fc72699c1040df3e791161f9017df2ec

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXg:7wqd87Vg

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks