General

  • Target

    ba5d7281f8a70f9f895a1fd2e13f9307dd905fc52156e98aa27fd9da36d6c5c7

  • Size

    899KB

  • Sample

    240624-2whmbswfqd

  • MD5

    47175de4613dba568615e52691171e80

  • SHA1

    f5cac64243ea6616ffd72a0df8065e9d29252fed

  • SHA256

    ba5d7281f8a70f9f895a1fd2e13f9307dd905fc52156e98aa27fd9da36d6c5c7

  • SHA512

    6e649ca8c2611895a12abb2129339f2793fa42243eaefac6fa2fda18ad4fa9f59b35d11ae6cef471e420bd665ae98a93a8399ad2a43f53800ad56e925cdbd5d5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      ba5d7281f8a70f9f895a1fd2e13f9307dd905fc52156e98aa27fd9da36d6c5c7

    • Size

      899KB

    • MD5

      47175de4613dba568615e52691171e80

    • SHA1

      f5cac64243ea6616ffd72a0df8065e9d29252fed

    • SHA256

      ba5d7281f8a70f9f895a1fd2e13f9307dd905fc52156e98aa27fd9da36d6c5c7

    • SHA512

      6e649ca8c2611895a12abb2129339f2793fa42243eaefac6fa2fda18ad4fa9f59b35d11ae6cef471e420bd665ae98a93a8399ad2a43f53800ad56e925cdbd5d5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks