General

  • Target

    60bdb1da8929427e85d819dcd6ae4bd661c46f17223dbe37d5a4a7cda201f80e_NeikiAnalytics.exe

  • Size

    899KB

  • Sample

    240627-hstewazgnl

  • MD5

    1c270593d81e05f41937473b584937f0

  • SHA1

    5eea6edb9ee8df275c12451b7455462b764d765d

  • SHA256

    60bdb1da8929427e85d819dcd6ae4bd661c46f17223dbe37d5a4a7cda201f80e

  • SHA512

    f9a6cfd16bdf898dde8650c2e6bee1dd52ea887fc0ef85d82260c45a39ed9e3f9bc54bee759b0420d2288ef19387eed736ad526875154536790f3d6efc756a61

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      60bdb1da8929427e85d819dcd6ae4bd661c46f17223dbe37d5a4a7cda201f80e_NeikiAnalytics.exe

    • Size

      899KB

    • MD5

      1c270593d81e05f41937473b584937f0

    • SHA1

      5eea6edb9ee8df275c12451b7455462b764d765d

    • SHA256

      60bdb1da8929427e85d819dcd6ae4bd661c46f17223dbe37d5a4a7cda201f80e

    • SHA512

      f9a6cfd16bdf898dde8650c2e6bee1dd52ea887fc0ef85d82260c45a39ed9e3f9bc54bee759b0420d2288ef19387eed736ad526875154536790f3d6efc756a61

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXU:7wqd87VU

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks