Overview

overview

10

Static

static

3

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    1024KB

  • Sample

    240125-vzqzjsbfa8

  • MD5

    ff1314fcd0655e6a623c5ebb653fa4ad

  • SHA1

    9b462a5db1d03b117bd5690d338c72508615ea3c

  • SHA256

    44b31966477c2de4c597320203ecffb475d6a42c8ba8800418391da350e31b02

  • SHA512

    4bc44d7b9bc18835eea6c9c78bbc0243b3c176976476951369a11369175bd2d555e4772881003fa695065e83ae00ab70b5c9eadde20d97b6927917e4fe216cca

  • SSDEEP

    24576:bSeaWMYCNjap9JGzCHJgrGlnW57xOokesf05W12:bS8R9UCHJgrGlW5zsps

Score
10/10
gh0stratkinsingloaderratupx

Malware Config

Targets

    • Target

      tmp

    • Size

      1024KB

    • MD5

      ff1314fcd0655e6a623c5ebb653fa4ad

    • SHA1

      9b462a5db1d03b117bd5690d338c72508615ea3c

    • SHA256

      44b31966477c2de4c597320203ecffb475d6a42c8ba8800418391da350e31b02

    • SHA512

      4bc44d7b9bc18835eea6c9c78bbc0243b3c176976476951369a11369175bd2d555e4772881003fa695065e83ae00ab70b5c9eadde20d97b6927917e4fe216cca

    • SSDEEP

      24576:bSeaWMYCNjap9JGzCHJgrGlnW57xOokesf05W12:bS8R9UCHJgrGlW5zsps

    Score
    10/10
    gh0stratratupxkinsingloader

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Kinsing

      Kinsing is a loader written in Golang.

      loaderkinsing

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks