General

  • Target

    f2ec8e00a71d505d0f580b77c929af028d8075418e2b25721abe9905898ec3e9

  • Size

    51KB

  • Sample

    240505-al4m9sgd4s

  • MD5

    dcc7fe9984f40191ebdc192d1b2055f4

  • SHA1

    a95740d181ad427f5125a45f3a86de35d5fc4597

  • SHA256

    f2ec8e00a71d505d0f580b77c929af028d8075418e2b25721abe9905898ec3e9

  • SHA512

    730717bf8d378d1dc0d52513f1ff9055f251661ced653045ff5082d7c16d3c3c5b7d0f561da9ea619ab549000f0d7f5c8618ab5ef8078be4ce5c913010169bfd

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fbohJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f2ec8e00a71d505d0f580b77c929af028d8075418e2b25721abe9905898ec3e9

    • Size

      51KB

    • MD5

      dcc7fe9984f40191ebdc192d1b2055f4

    • SHA1

      a95740d181ad427f5125a45f3a86de35d5fc4597

    • SHA256

      f2ec8e00a71d505d0f580b77c929af028d8075418e2b25721abe9905898ec3e9

    • SHA512

      730717bf8d378d1dc0d52513f1ff9055f251661ced653045ff5082d7c16d3c3c5b7d0f561da9ea619ab549000f0d7f5c8618ab5ef8078be4ce5c913010169bfd

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fbohJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks