General

  • Target

    770856244a97f311ce1cc453a4aa0604b9e9a8beeb92228a17adf24e33ee3973

  • Size

    899KB

  • Sample

    240809-rgprzs1fql

  • MD5

    2c73924a8eca1a9c19593b8e472c0192

  • SHA1

    781ebfa082f14fd6bcf314f4e9362f5367e52c6c

  • SHA256

    770856244a97f311ce1cc453a4aa0604b9e9a8beeb92228a17adf24e33ee3973

  • SHA512

    0dec9b2cd970b970c43b2cb2e8a05dfd861f3b80a5e86f80095fe1aa3e32fa9238c3ccac47a152fdf76be70f9d7f072b8f28c0de4d20cfba528580e34f3a8cec

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX7:7wqd87V7

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      770856244a97f311ce1cc453a4aa0604b9e9a8beeb92228a17adf24e33ee3973

    • Size

      899KB

    • MD5

      2c73924a8eca1a9c19593b8e472c0192

    • SHA1

      781ebfa082f14fd6bcf314f4e9362f5367e52c6c

    • SHA256

      770856244a97f311ce1cc453a4aa0604b9e9a8beeb92228a17adf24e33ee3973

    • SHA512

      0dec9b2cd970b970c43b2cb2e8a05dfd861f3b80a5e86f80095fe1aa3e32fa9238c3ccac47a152fdf76be70f9d7f072b8f28c0de4d20cfba528580e34f3a8cec

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX7:7wqd87V7

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks