General

  • Target

    bccfb3cc5dd9338dc7239b9fd0a6217ca9cd3fbaaa7eb22f7c0527f2363fe024

  • Size

    899KB

  • Sample

    240723-nya4davejr

  • MD5

    76a9e27b8fb3bfaba0c004f6d181699b

  • SHA1

    c30cd19a2979e4ba94c9108e406a2157a16b1660

  • SHA256

    bccfb3cc5dd9338dc7239b9fd0a6217ca9cd3fbaaa7eb22f7c0527f2363fe024

  • SHA512

    2966a8a3f38fd640484fc62c1153e21d72923fb7d76af719ef14d01124ee26a8d924ee2db7c501350f1061c101795d6b6f0bf0f9c4523fa5835dba5717a970f5

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      bccfb3cc5dd9338dc7239b9fd0a6217ca9cd3fbaaa7eb22f7c0527f2363fe024

    • Size

      899KB

    • MD5

      76a9e27b8fb3bfaba0c004f6d181699b

    • SHA1

      c30cd19a2979e4ba94c9108e406a2157a16b1660

    • SHA256

      bccfb3cc5dd9338dc7239b9fd0a6217ca9cd3fbaaa7eb22f7c0527f2363fe024

    • SHA512

      2966a8a3f38fd640484fc62c1153e21d72923fb7d76af719ef14d01124ee26a8d924ee2db7c501350f1061c101795d6b6f0bf0f9c4523fa5835dba5717a970f5

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXZ:7wqd87VZ

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks