General

  • Target

    d6d654671b4f6557da7350ebee30204d6cf08dc46b5795a8f911695a365e9747

  • Size

    899KB

  • Sample

    240718-3ykedashqr

  • MD5

    b978fdf7ad0ea9680cd41f85fe6303cd

  • SHA1

    3675b1fff37773964965f3ca54d1373265134f5c

  • SHA256

    d6d654671b4f6557da7350ebee30204d6cf08dc46b5795a8f911695a365e9747

  • SHA512

    8185d12e4a0670f12d393fb1a05edc3dc96ca76714cedd2b90fcef8a182405b2a8edb1ff83b5ea287c5d6ea2f5e1866f86c9f739c9a2eda1222cb2e94a04a7c2

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      d6d654671b4f6557da7350ebee30204d6cf08dc46b5795a8f911695a365e9747

    • Size

      899KB

    • MD5

      b978fdf7ad0ea9680cd41f85fe6303cd

    • SHA1

      3675b1fff37773964965f3ca54d1373265134f5c

    • SHA256

      d6d654671b4f6557da7350ebee30204d6cf08dc46b5795a8f911695a365e9747

    • SHA512

      8185d12e4a0670f12d393fb1a05edc3dc96ca76714cedd2b90fcef8a182405b2a8edb1ff83b5ea287c5d6ea2f5e1866f86c9f739c9a2eda1222cb2e94a04a7c2

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks