General

  • Target

    3387662854e4582d1297f4200df99711ebd5c17ecf6056d477cf044ed9330208

  • Size

    51KB

  • Sample

    240429-wvpflahe2s

  • MD5

    3f7c10b06eb7336932087bdb9bca892c

  • SHA1

    6369eee4f7c204bf9f82f62792615e3278457a61

  • SHA256

    3387662854e4582d1297f4200df99711ebd5c17ecf6056d477cf044ed9330208

  • SHA512

    518f6c4e790417d78bd135ebfba569f473b0d7d1a2280e6aa599a68d052f694ab3b6f21dcdeff4b66c7ea64dcf974d7f4e5957e54c6901263d61560d7e18469d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbocJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3387662854e4582d1297f4200df99711ebd5c17ecf6056d477cf044ed9330208

    • Size

      51KB

    • MD5

      3f7c10b06eb7336932087bdb9bca892c

    • SHA1

      6369eee4f7c204bf9f82f62792615e3278457a61

    • SHA256

      3387662854e4582d1297f4200df99711ebd5c17ecf6056d477cf044ed9330208

    • SHA512

      518f6c4e790417d78bd135ebfba569f473b0d7d1a2280e6aa599a68d052f694ab3b6f21dcdeff4b66c7ea64dcf974d7f4e5957e54c6901263d61560d7e18469d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbocJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks