General

  • Target

    ce4432d29704239295032701424d5141f2ffb57fe65a540e2dd38d0c0f51f1ad

  • Size

    51KB

  • Sample

    240428-x2m2safc7z

  • MD5

    b21ab94d6f5b0f16c369601b1b797b18

  • SHA1

    8031c2e1b94cb71138c007c7e2853355ff28344a

  • SHA256

    ce4432d29704239295032701424d5141f2ffb57fe65a540e2dd38d0c0f51f1ad

  • SHA512

    ab4ef55dfa18ab3606562aa93c0fce4bc90bae1ae90523c8e9e74aa2b5ef572009fd5aa513f304f28fbbb9446a99e864558ec9d975f2ab4d4410a04e6dea453b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLoJYH5:1dWubF3n9S91BF3fbocJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ce4432d29704239295032701424d5141f2ffb57fe65a540e2dd38d0c0f51f1ad

    • Size

      51KB

    • MD5

      b21ab94d6f5b0f16c369601b1b797b18

    • SHA1

      8031c2e1b94cb71138c007c7e2853355ff28344a

    • SHA256

      ce4432d29704239295032701424d5141f2ffb57fe65a540e2dd38d0c0f51f1ad

    • SHA512

      ab4ef55dfa18ab3606562aa93c0fce4bc90bae1ae90523c8e9e74aa2b5ef572009fd5aa513f304f28fbbb9446a99e864558ec9d975f2ab4d4410a04e6dea453b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLoJYH5:1dWubF3n9S91BF3fbocJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks