General

  • Target

    296f68d84e4230ec387830a901899eb43caad13eca15034954f1afe473189ca7

  • Size

    899KB

  • Sample

    240722-16news1eng

  • MD5

    43084ad1050834950384994f3a60ae4d

  • SHA1

    cab51aa13cc4bfb9e35d2a69c854179ccaf665f8

  • SHA256

    296f68d84e4230ec387830a901899eb43caad13eca15034954f1afe473189ca7

  • SHA512

    ff05256418984f362c0cc3239aea5b640df8156654c928d01b117c6baf05b35de518da2f7ea77125f705a92f818bbe64f87b965d3c35108e96505929e0245902

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      296f68d84e4230ec387830a901899eb43caad13eca15034954f1afe473189ca7

    • Size

      899KB

    • MD5

      43084ad1050834950384994f3a60ae4d

    • SHA1

      cab51aa13cc4bfb9e35d2a69c854179ccaf665f8

    • SHA256

      296f68d84e4230ec387830a901899eb43caad13eca15034954f1afe473189ca7

    • SHA512

      ff05256418984f362c0cc3239aea5b640df8156654c928d01b117c6baf05b35de518da2f7ea77125f705a92f818bbe64f87b965d3c35108e96505929e0245902

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXe:7wqd87Ve

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks