General

  • Target

    8d72645cdf514af0f512c9e0b04b316b69ac5569126c4f8523da3b5ea690efbe

  • Size

    899KB

  • Sample

    240719-31cgjsxajj

  • MD5

    1747420746121e18df683b46816f1661

  • SHA1

    77f0e2cb7acb0079e8b2bc71ad66f984f64316b5

  • SHA256

    8d72645cdf514af0f512c9e0b04b316b69ac5569126c4f8523da3b5ea690efbe

  • SHA512

    f2193fa809c133d3dfb79464015fdfd6e75ba346f62fc069aa08f187b27ff25b349b76681c2afe0c9718cd1e988f1e32ab4e01bc54c6446821322fd7fb15cd85

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      8d72645cdf514af0f512c9e0b04b316b69ac5569126c4f8523da3b5ea690efbe

    • Size

      899KB

    • MD5

      1747420746121e18df683b46816f1661

    • SHA1

      77f0e2cb7acb0079e8b2bc71ad66f984f64316b5

    • SHA256

      8d72645cdf514af0f512c9e0b04b316b69ac5569126c4f8523da3b5ea690efbe

    • SHA512

      f2193fa809c133d3dfb79464015fdfd6e75ba346f62fc069aa08f187b27ff25b349b76681c2afe0c9718cd1e988f1e32ab4e01bc54c6446821322fd7fb15cd85

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXT:7wqd87VT

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks