General

  • Target

    bafa955c5fb18e8942e1e2e0a93f99855c57c15b3a72544b4113ae4a4d9acb94

  • Size

    51KB

  • Sample

    240427-wvprcsec81

  • MD5

    d97fb5765e8f04b759eb0017e10ef8d2

  • SHA1

    6607b2d0efca6814a7442520059fe20265c62d6a

  • SHA256

    bafa955c5fb18e8942e1e2e0a93f99855c57c15b3a72544b4113ae4a4d9acb94

  • SHA512

    265daf07e1a3278badca285e1cada7cda991a1a0e2cd5df83bada4a5b6cdef8309facf00d7d237a94e62f92a657414e1a8292ca69c8ef7af822425070b4e42f9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+bJYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      bafa955c5fb18e8942e1e2e0a93f99855c57c15b3a72544b4113ae4a4d9acb94

    • Size

      51KB

    • MD5

      d97fb5765e8f04b759eb0017e10ef8d2

    • SHA1

      6607b2d0efca6814a7442520059fe20265c62d6a

    • SHA256

      bafa955c5fb18e8942e1e2e0a93f99855c57c15b3a72544b4113ae4a4d9acb94

    • SHA512

      265daf07e1a3278badca285e1cada7cda991a1a0e2cd5df83bada4a5b6cdef8309facf00d7d237a94e62f92a657414e1a8292ca69c8ef7af822425070b4e42f9

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+bJYH5:1dWubF3n9S91BF3fboQJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks