General

  • Target

    7ed16d91f8427b61103379ee10935920a0b870fa0dd3f71db038b1ed260a3466

  • Size

    899KB

  • Sample

    240625-zl81esvdqr

  • MD5

    ae8e2b1737cbf46eb368ae9c52a0976f

  • SHA1

    240e9180c4d6143cbf66e8a089639f98fc67f69b

  • SHA256

    7ed16d91f8427b61103379ee10935920a0b870fa0dd3f71db038b1ed260a3466

  • SHA512

    59aa99349c089e7d5cd66dcbfb6aedda48ab45ec8d5221192bfad3d011fa6a99ffc5646abc592020fe3f284a14ae3544abba2d6515a0ca1e9df0f5fa9abcdcd5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      7ed16d91f8427b61103379ee10935920a0b870fa0dd3f71db038b1ed260a3466

    • Size

      899KB

    • MD5

      ae8e2b1737cbf46eb368ae9c52a0976f

    • SHA1

      240e9180c4d6143cbf66e8a089639f98fc67f69b

    • SHA256

      7ed16d91f8427b61103379ee10935920a0b870fa0dd3f71db038b1ed260a3466

    • SHA512

      59aa99349c089e7d5cd66dcbfb6aedda48ab45ec8d5221192bfad3d011fa6a99ffc5646abc592020fe3f284a14ae3544abba2d6515a0ca1e9df0f5fa9abcdcd5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXa:7wqd87Va

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks