General

  • Target

    b0dc80dfb102642783c8f33d9069b4b9f201a8f2a06dbfa2b9e21117e980f3e1

  • Size

    51KB

  • Sample

    240428-xzvnvafc2z

  • MD5

    577fe050acadd31d9c8b802e5247b350

  • SHA1

    7363321af962584c254ff15b810d406b55a8b5fc

  • SHA256

    b0dc80dfb102642783c8f33d9069b4b9f201a8f2a06dbfa2b9e21117e980f3e1

  • SHA512

    072ea6a5be4ff65e0514b3c592459473e99be12053f0f275b63ee969c5b1321af981a2ee7fd43fe57b9a0f3cefe190b32b096579967de3b97e8489dd8d20ca09

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboNJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b0dc80dfb102642783c8f33d9069b4b9f201a8f2a06dbfa2b9e21117e980f3e1

    • Size

      51KB

    • MD5

      577fe050acadd31d9c8b802e5247b350

    • SHA1

      7363321af962584c254ff15b810d406b55a8b5fc

    • SHA256

      b0dc80dfb102642783c8f33d9069b4b9f201a8f2a06dbfa2b9e21117e980f3e1

    • SHA512

      072ea6a5be4ff65e0514b3c592459473e99be12053f0f275b63ee969c5b1321af981a2ee7fd43fe57b9a0f3cefe190b32b096579967de3b97e8489dd8d20ca09

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboNJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks