General

  • Target

    87cbea099c1dc331338685e96c2d3c7af40f97f40f031d1e90c1f4e01bc28a6a

  • Size

    51KB

  • Sample

    240427-z5crbsgf84

  • MD5

    79b8f20c5fb64258014e7417801182d7

  • SHA1

    1aa1b22c84096e6c08166ccedfb0cd8e2c16c110

  • SHA256

    87cbea099c1dc331338685e96c2d3c7af40f97f40f031d1e90c1f4e01bc28a6a

  • SHA512

    6f4c906101a96f4fe2bfa3d6098322faa5bb9cb97c66af6deedc4f842ccb380e74cbb460f33a7b24af3b5366722de23c3d463ca4dcbfd83272009c751681fdf8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fboAJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      87cbea099c1dc331338685e96c2d3c7af40f97f40f031d1e90c1f4e01bc28a6a

    • Size

      51KB

    • MD5

      79b8f20c5fb64258014e7417801182d7

    • SHA1

      1aa1b22c84096e6c08166ccedfb0cd8e2c16c110

    • SHA256

      87cbea099c1dc331338685e96c2d3c7af40f97f40f031d1e90c1f4e01bc28a6a

    • SHA512

      6f4c906101a96f4fe2bfa3d6098322faa5bb9cb97c66af6deedc4f842ccb380e74cbb460f33a7b24af3b5366722de23c3d463ca4dcbfd83272009c751681fdf8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fboAJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks