General

  • Target

    e2e50570dfe0742c78c10001994313ce26d69e19e63dd594017cf0e2ed0703bf

  • Size

    51KB

  • Sample

    240504-3bpetaaa79

  • MD5

    30b7968a09c1a6a250d6b04b261843f7

  • SHA1

    03b9a345b598835eb5b23880a9fbb969b643537f

  • SHA256

    e2e50570dfe0742c78c10001994313ce26d69e19e63dd594017cf0e2ed0703bf

  • SHA512

    d6043d92081dc31b568b73e35c645d17ed0bcf63841441cd82e0ceec3a82d245c81e9866c36e8dfada9ba4e5c35afbd4ff4d9a955cf9cbd52c14d15baf483100

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e2e50570dfe0742c78c10001994313ce26d69e19e63dd594017cf0e2ed0703bf

    • Size

      51KB

    • MD5

      30b7968a09c1a6a250d6b04b261843f7

    • SHA1

      03b9a345b598835eb5b23880a9fbb969b643537f

    • SHA256

      e2e50570dfe0742c78c10001994313ce26d69e19e63dd594017cf0e2ed0703bf

    • SHA512

      d6043d92081dc31b568b73e35c645d17ed0bcf63841441cd82e0ceec3a82d245c81e9866c36e8dfada9ba4e5c35afbd4ff4d9a955cf9cbd52c14d15baf483100

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks