General

  • Target

    2dfdea38e07b82c85cec30e9075bed261c79ee0a0c02ba26de8bbb0c10cb9def

  • Size

    899KB

  • Sample

    240627-dy66pszdrh

  • MD5

    2f0b65e2710b4e689611b41b8ec78c56

  • SHA1

    eb5775d87c1d4c88056fac16857a3915708ad112

  • SHA256

    2dfdea38e07b82c85cec30e9075bed261c79ee0a0c02ba26de8bbb0c10cb9def

  • SHA512

    7322b6457d80b9fa9d9c4d4d3a7129c22fa5a79885645a26e35f7ab2b5a3bc99e5b9daadaeec160a75b3e77a97950928cad8d53a76c20678cfb957119758caa7

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2dfdea38e07b82c85cec30e9075bed261c79ee0a0c02ba26de8bbb0c10cb9def

    • Size

      899KB

    • MD5

      2f0b65e2710b4e689611b41b8ec78c56

    • SHA1

      eb5775d87c1d4c88056fac16857a3915708ad112

    • SHA256

      2dfdea38e07b82c85cec30e9075bed261c79ee0a0c02ba26de8bbb0c10cb9def

    • SHA512

      7322b6457d80b9fa9d9c4d4d3a7129c22fa5a79885645a26e35f7ab2b5a3bc99e5b9daadaeec160a75b3e77a97950928cad8d53a76c20678cfb957119758caa7

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXh:7wqd87Vh

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks