General

  • Target

    2733104e78ff1934fcb8dfe2465e73ed90f5c89e0d4d533218c4725a8e3870ab

  • Size

    899KB

  • Sample

    240722-xwl8astarb

  • MD5

    fe303bf61ff9de80d78e2f61d5d3c9a2

  • SHA1

    aa923ff9d66efd3ebb179e00ce37164786f2aad7

  • SHA256

    2733104e78ff1934fcb8dfe2465e73ed90f5c89e0d4d533218c4725a8e3870ab

  • SHA512

    8e70ade595bdc2362eb2ab6179816bff0e3856d0786f679ed22c7888a2716fc3c655cf7e4d53cd63296ef2c9d136385f0879ea3cf7d39d6240b2d15af16a1e53

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      2733104e78ff1934fcb8dfe2465e73ed90f5c89e0d4d533218c4725a8e3870ab

    • Size

      899KB

    • MD5

      fe303bf61ff9de80d78e2f61d5d3c9a2

    • SHA1

      aa923ff9d66efd3ebb179e00ce37164786f2aad7

    • SHA256

      2733104e78ff1934fcb8dfe2465e73ed90f5c89e0d4d533218c4725a8e3870ab

    • SHA512

      8e70ade595bdc2362eb2ab6179816bff0e3856d0786f679ed22c7888a2716fc3c655cf7e4d53cd63296ef2c9d136385f0879ea3cf7d39d6240b2d15af16a1e53

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXP:7wqd87VP

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks