General

  • Target

    c58f8d4991a84ebc9372844856d4673ae2a24cbc2fdbcfbfa22924c0ba9dd710

  • Size

    899KB

  • Sample

    240627-xfqksavdqe

  • MD5

    a38e16b549327f5a23f14813dcf11c42

  • SHA1

    74f1f5437167ebe624938b0129cea942b752d35c

  • SHA256

    c58f8d4991a84ebc9372844856d4673ae2a24cbc2fdbcfbfa22924c0ba9dd710

  • SHA512

    27a4255b83ccf0c9790a8cd6cf97d960e7e92c2f9a9a56386935ce0dd7e008ec29bbad29da9fec34f4baf7401e279e5a466ab7a67586b815560a7ae754dc9c08

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      c58f8d4991a84ebc9372844856d4673ae2a24cbc2fdbcfbfa22924c0ba9dd710

    • Size

      899KB

    • MD5

      a38e16b549327f5a23f14813dcf11c42

    • SHA1

      74f1f5437167ebe624938b0129cea942b752d35c

    • SHA256

      c58f8d4991a84ebc9372844856d4673ae2a24cbc2fdbcfbfa22924c0ba9dd710

    • SHA512

      27a4255b83ccf0c9790a8cd6cf97d960e7e92c2f9a9a56386935ce0dd7e008ec29bbad29da9fec34f4baf7401e279e5a466ab7a67586b815560a7ae754dc9c08

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXx:7wqd87Vx

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks