General

  • Target

    23e506ca126c00b4994938c0cd1441ac8bf52f05b42931ac9cf3c94da35c5db2

  • Size

    51KB

  • Sample

    240430-alhqssef55

  • MD5

    4d3b898fba8a390f2ba191c4118b11ae

  • SHA1

    79cbf04ad4bb9ab55bb45759496d0e8e71022e55

  • SHA256

    23e506ca126c00b4994938c0cd1441ac8bf52f05b42931ac9cf3c94da35c5db2

  • SHA512

    2615047336acd7e6e1b552aff5cfb6d9cb3ffe3bb995ab317e9d49938ad1852e130828dd780f2d4ad82c2b8eeb3e4764634512c8317f5aa504aa32d59cec2b4d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fbokJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      23e506ca126c00b4994938c0cd1441ac8bf52f05b42931ac9cf3c94da35c5db2

    • Size

      51KB

    • MD5

      4d3b898fba8a390f2ba191c4118b11ae

    • SHA1

      79cbf04ad4bb9ab55bb45759496d0e8e71022e55

    • SHA256

      23e506ca126c00b4994938c0cd1441ac8bf52f05b42931ac9cf3c94da35c5db2

    • SHA512

      2615047336acd7e6e1b552aff5cfb6d9cb3ffe3bb995ab317e9d49938ad1852e130828dd780f2d4ad82c2b8eeb3e4764634512c8317f5aa504aa32d59cec2b4d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fbokJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks