General

  • Target

    86517fedd16d012f78bbc346bc6bc81d683c35636d262e15392bb76bda66afc3

  • Size

    51KB

  • Sample

    240503-19m9asfg6z

  • MD5

    fbd244b623b77bf63d5b279471b9ac9b

  • SHA1

    ecb27eb08061c4a0ed70425f4c3ca714714eee4f

  • SHA256

    86517fedd16d012f78bbc346bc6bc81d683c35636d262e15392bb76bda66afc3

  • SHA512

    ecff6a574ac9f70854d8f41cae841e467f4dce98bd50269c6ff70155fcd8e7e03d41dbd4fb2d485c6e231a6a3061d836704e5696040a7e6703d8f9ce3cbd9f27

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+8JYH5:1dWubF3n9S91BF3fborJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      86517fedd16d012f78bbc346bc6bc81d683c35636d262e15392bb76bda66afc3

    • Size

      51KB

    • MD5

      fbd244b623b77bf63d5b279471b9ac9b

    • SHA1

      ecb27eb08061c4a0ed70425f4c3ca714714eee4f

    • SHA256

      86517fedd16d012f78bbc346bc6bc81d683c35636d262e15392bb76bda66afc3

    • SHA512

      ecff6a574ac9f70854d8f41cae841e467f4dce98bd50269c6ff70155fcd8e7e03d41dbd4fb2d485c6e231a6a3061d836704e5696040a7e6703d8f9ce3cbd9f27

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+8JYH5:1dWubF3n9S91BF3fborJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks