General

  • Target

    8ad8ec641820c7835b6ef9b70011cb0f89f6f615b95b4194709546443d74a069

  • Size

    51KB

  • Sample

    240502-penqssag55

  • MD5

    1c187f6946adef9a3e9e8fb9b671d7c1

  • SHA1

    46a7705b5546078c42fbca3749e74f6274e75966

  • SHA256

    8ad8ec641820c7835b6ef9b70011cb0f89f6f615b95b4194709546443d74a069

  • SHA512

    c952b6553b009bbe375e457044bd47ac82e88c85bec0ca665bc9bc99726f66f2d22bc5531e53aad0c16c84b3ce8baf2c6c1e2733969d8d3972e55013a5845c33

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboKJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      8ad8ec641820c7835b6ef9b70011cb0f89f6f615b95b4194709546443d74a069

    • Size

      51KB

    • MD5

      1c187f6946adef9a3e9e8fb9b671d7c1

    • SHA1

      46a7705b5546078c42fbca3749e74f6274e75966

    • SHA256

      8ad8ec641820c7835b6ef9b70011cb0f89f6f615b95b4194709546443d74a069

    • SHA512

      c952b6553b009bbe375e457044bd47ac82e88c85bec0ca665bc9bc99726f66f2d22bc5531e53aad0c16c84b3ce8baf2c6c1e2733969d8d3972e55013a5845c33

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboKJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks