General

  • Target

    9a1ff201c3b7f3aec2c9652bfd66d3e53aad28ebdbeb54609a5256650be70783

  • Size

    899KB

  • Sample

    240625-smz1ksxdjd

  • MD5

    d63ad734e02756fc217a525810f92cd1

  • SHA1

    21b364ad6b58ed993c7178cc4aa193d949231963

  • SHA256

    9a1ff201c3b7f3aec2c9652bfd66d3e53aad28ebdbeb54609a5256650be70783

  • SHA512

    f4cba6b0cd437d233ab541c3c589ec70cacb6febaecf31d4cd3e7e92d59e6b4217063aed4cf38b17fb76f6ae90987bbc7b9a2608a719411b33e717165373d2f9

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      9a1ff201c3b7f3aec2c9652bfd66d3e53aad28ebdbeb54609a5256650be70783

    • Size

      899KB

    • MD5

      d63ad734e02756fc217a525810f92cd1

    • SHA1

      21b364ad6b58ed993c7178cc4aa193d949231963

    • SHA256

      9a1ff201c3b7f3aec2c9652bfd66d3e53aad28ebdbeb54609a5256650be70783

    • SHA512

      f4cba6b0cd437d233ab541c3c589ec70cacb6febaecf31d4cd3e7e92d59e6b4217063aed4cf38b17fb76f6ae90987bbc7b9a2608a719411b33e717165373d2f9

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXD:7wqd87VD

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks