General

  • Target

    ce33996b3332a480c62e5df8d211f25fdb377cffc158064b79d00448981dfba2

  • Size

    51KB

  • Sample

    240428-xzwwxaeh65

  • MD5

    c8432126db6cb5ad98a1e31c390fd3c9

  • SHA1

    72377ebe40fd91c0fb8d0e75b0f58bf692a62d8c

  • SHA256

    ce33996b3332a480c62e5df8d211f25fdb377cffc158064b79d00448981dfba2

  • SHA512

    cf3b4473373e0922faf3266dfa352d139b1f15f83b3c7ace9871cf9595c172f1a988cab2b479fa22572a94fdc36450a6b5f0a17f1891ff3f9df429c981e53045

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLjJYH5:1dWubF3n9S91BF3fboXJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ce33996b3332a480c62e5df8d211f25fdb377cffc158064b79d00448981dfba2

    • Size

      51KB

    • MD5

      c8432126db6cb5ad98a1e31c390fd3c9

    • SHA1

      72377ebe40fd91c0fb8d0e75b0f58bf692a62d8c

    • SHA256

      ce33996b3332a480c62e5df8d211f25fdb377cffc158064b79d00448981dfba2

    • SHA512

      cf3b4473373e0922faf3266dfa352d139b1f15f83b3c7ace9871cf9595c172f1a988cab2b479fa22572a94fdc36450a6b5f0a17f1891ff3f9df429c981e53045

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLjJYH5:1dWubF3n9S91BF3fboXJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks