General

  • Target

    6479f8b08b5ea737792c0e15e1ee59f8801ccd1248d6802963557a2d61e1edf3

  • Size

    899KB

  • Sample

    240626-b3zajszdpj

  • MD5

    fe2fe1d31db211a2b02efae6881e0fb2

  • SHA1

    5ffe6d4f3adc91b2bd90ab010f30a0c469832215

  • SHA256

    6479f8b08b5ea737792c0e15e1ee59f8801ccd1248d6802963557a2d61e1edf3

  • SHA512

    763ed73e61c9b44b6f4dff840b692bb3acdd43eacf4b635e1aee5c9a6429beb7036b7dc8acc87a9a4323718360e662ef55b3ac19943065127d5a544dc9888245

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      6479f8b08b5ea737792c0e15e1ee59f8801ccd1248d6802963557a2d61e1edf3

    • Size

      899KB

    • MD5

      fe2fe1d31db211a2b02efae6881e0fb2

    • SHA1

      5ffe6d4f3adc91b2bd90ab010f30a0c469832215

    • SHA256

      6479f8b08b5ea737792c0e15e1ee59f8801ccd1248d6802963557a2d61e1edf3

    • SHA512

      763ed73e61c9b44b6f4dff840b692bb3acdd43eacf4b635e1aee5c9a6429beb7036b7dc8acc87a9a4323718360e662ef55b3ac19943065127d5a544dc9888245

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks