General

  • Target

    0a66a7e883cb8106dd887829c45731ee52a952be2ff23519398dac5baa84edf9

  • Size

    51KB

  • Sample

    240504-1962eadb9y

  • MD5

    6b24def12a9adf3e7ab89ca079a95194

  • SHA1

    e8fc7db54fc9437a5347d986810e717a39e53505

  • SHA256

    0a66a7e883cb8106dd887829c45731ee52a952be2ff23519398dac5baa84edf9

  • SHA512

    973547d9f9e3d75058ffdafa3160823c60d58d66a324d350f0f9fffb2f62de1608dbd84a3b572f276c86ec2597e15df5ef0b7448b6faa6b7c4c7dcde8a442b6f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL1JYH5:1dWubF3n9S91BF3fboxJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0a66a7e883cb8106dd887829c45731ee52a952be2ff23519398dac5baa84edf9

    • Size

      51KB

    • MD5

      6b24def12a9adf3e7ab89ca079a95194

    • SHA1

      e8fc7db54fc9437a5347d986810e717a39e53505

    • SHA256

      0a66a7e883cb8106dd887829c45731ee52a952be2ff23519398dac5baa84edf9

    • SHA512

      973547d9f9e3d75058ffdafa3160823c60d58d66a324d350f0f9fffb2f62de1608dbd84a3b572f276c86ec2597e15df5ef0b7448b6faa6b7c4c7dcde8a442b6f

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL1JYH5:1dWubF3n9S91BF3fboxJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks