General

  • Target

    d373a6eb3984df17a8ef81d7a9e8cbef34902d59ed782cafc331f689e6ee0c17

  • Size

    899KB

  • Sample

    240712-gtd6xa1enr

  • MD5

    7d67124660e4be132c8885cea438085d

  • SHA1

    2905e6f813d74dcce9bd9015f501c594873f6e7e

  • SHA256

    d373a6eb3984df17a8ef81d7a9e8cbef34902d59ed782cafc331f689e6ee0c17

  • SHA512

    0f5420f4a00c60abec3121f3976fe42cbf2e3c9edd50cb192bc1f8956da25de7d9f4bf235d219b43d55b8f290dbaee430ec229fab6cf95acead7c32e44398b68

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d373a6eb3984df17a8ef81d7a9e8cbef34902d59ed782cafc331f689e6ee0c17

    • Size

      899KB

    • MD5

      7d67124660e4be132c8885cea438085d

    • SHA1

      2905e6f813d74dcce9bd9015f501c594873f6e7e

    • SHA256

      d373a6eb3984df17a8ef81d7a9e8cbef34902d59ed782cafc331f689e6ee0c17

    • SHA512

      0f5420f4a00c60abec3121f3976fe42cbf2e3c9edd50cb192bc1f8956da25de7d9f4bf235d219b43d55b8f290dbaee430ec229fab6cf95acead7c32e44398b68

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks