General

  • Target

    2bfab1f37214efbef4c363f7f528315ac63e3fcdc2f4cdb2a2bf6e5bc115baab

  • Size

    899KB

  • Sample

    240624-2p79eayhmj

  • MD5

    20da029de8d7bf5892fa53d10e560f9d

  • SHA1

    06433fe3cf363198657ee60742cfebecbfd7397c

  • SHA256

    2bfab1f37214efbef4c363f7f528315ac63e3fcdc2f4cdb2a2bf6e5bc115baab

  • SHA512

    dc3bedfa65b608597e69bb3dd469fe2c1b547258e17830dc7783a7bbb7987a139daeb25a1e4e2a46e91eaa043bb6df2cfdf65de20591a55dba6d55ff6d42694c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX2:7wqd87V2

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2bfab1f37214efbef4c363f7f528315ac63e3fcdc2f4cdb2a2bf6e5bc115baab

    • Size

      899KB

    • MD5

      20da029de8d7bf5892fa53d10e560f9d

    • SHA1

      06433fe3cf363198657ee60742cfebecbfd7397c

    • SHA256

      2bfab1f37214efbef4c363f7f528315ac63e3fcdc2f4cdb2a2bf6e5bc115baab

    • SHA512

      dc3bedfa65b608597e69bb3dd469fe2c1b547258e17830dc7783a7bbb7987a139daeb25a1e4e2a46e91eaa043bb6df2cfdf65de20591a55dba6d55ff6d42694c

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX2:7wqd87V2

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks