General

  • Target

    567bd4a71d9b13c49dd2147c2eb3fe393d2e790ef6d8f5d86330675ed9884274

  • Size

    899KB

  • Sample

    240627-xdz2favcqh

  • MD5

    3428896c0f7a284ce80e17ad8a98ed8b

  • SHA1

    761adb99178564de5d57577791946a7924f17730

  • SHA256

    567bd4a71d9b13c49dd2147c2eb3fe393d2e790ef6d8f5d86330675ed9884274

  • SHA512

    90c02deffca62b670c73bb80e5dcc7f00ce308f6a4c4d4729be60509d0b5f5220a2b47201b7d87f5901af96c3e23794cbbb6b4496389d91572971e2fa38178f5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      567bd4a71d9b13c49dd2147c2eb3fe393d2e790ef6d8f5d86330675ed9884274

    • Size

      899KB

    • MD5

      3428896c0f7a284ce80e17ad8a98ed8b

    • SHA1

      761adb99178564de5d57577791946a7924f17730

    • SHA256

      567bd4a71d9b13c49dd2147c2eb3fe393d2e790ef6d8f5d86330675ed9884274

    • SHA512

      90c02deffca62b670c73bb80e5dcc7f00ce308f6a4c4d4729be60509d0b5f5220a2b47201b7d87f5901af96c3e23794cbbb6b4496389d91572971e2fa38178f5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks