General

  • Target

    579dc71a55fa1da05e31c89a72208d4ff1a9c02d86d4ba366bf27f863807d64a

  • Size

    899KB

  • Sample

    240722-xyntxateqm

  • MD5

    a9de41e68896cbb96cc3c0eaeec8ebc0

  • SHA1

    c98e84e6399ff7859356dbb25a08d041490b0ddd

  • SHA256

    579dc71a55fa1da05e31c89a72208d4ff1a9c02d86d4ba366bf27f863807d64a

  • SHA512

    9b17374abf552b11d6118832c774a1b6788bca5adc944e4fe86ad5f5b4edf308f178b704c3d77a6708bcc29c595027940fa71ccaf98a1ca73eb569d72bfc9fc6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      579dc71a55fa1da05e31c89a72208d4ff1a9c02d86d4ba366bf27f863807d64a

    • Size

      899KB

    • MD5

      a9de41e68896cbb96cc3c0eaeec8ebc0

    • SHA1

      c98e84e6399ff7859356dbb25a08d041490b0ddd

    • SHA256

      579dc71a55fa1da05e31c89a72208d4ff1a9c02d86d4ba366bf27f863807d64a

    • SHA512

      9b17374abf552b11d6118832c774a1b6788bca5adc944e4fe86ad5f5b4edf308f178b704c3d77a6708bcc29c595027940fa71ccaf98a1ca73eb569d72bfc9fc6

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXq:7wqd87Vq

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks