General

  • Target

    316a2374df492789c437e170bc6c292cc8fef8211c9355355fd2b1b96a460128

  • Size

    899KB

  • Sample

    240712-s1w6vazdlr

  • MD5

    901247e619460f03b3922ed3311c1e00

  • SHA1

    180afa007ef0af322a11f3818f8de76842ef09ed

  • SHA256

    316a2374df492789c437e170bc6c292cc8fef8211c9355355fd2b1b96a460128

  • SHA512

    30d8a40268560f803c4e9a73d7336f1f62eb55bfd6463c7fa40f73c3254b43b6fa76194ff9504508d5d865acde4fdb30ea3ece275b6c91204d368113bd34f893

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      316a2374df492789c437e170bc6c292cc8fef8211c9355355fd2b1b96a460128

    • Size

      899KB

    • MD5

      901247e619460f03b3922ed3311c1e00

    • SHA1

      180afa007ef0af322a11f3818f8de76842ef09ed

    • SHA256

      316a2374df492789c437e170bc6c292cc8fef8211c9355355fd2b1b96a460128

    • SHA512

      30d8a40268560f803c4e9a73d7336f1f62eb55bfd6463c7fa40f73c3254b43b6fa76194ff9504508d5d865acde4fdb30ea3ece275b6c91204d368113bd34f893

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXI:7wqd87VI

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks