General

  • Target

    909ce4c47ae02d0f886ad14d5204ae33b964631ad56f3e3f50abb3e216558156

  • Size

    51KB

  • Sample

    240507-rkfcqaag3x

  • MD5

    e94857d3eb7d56a2a9ba99927ea2daab

  • SHA1

    7134072136ad26a4b924c7155f6d56c697f49d66

  • SHA256

    909ce4c47ae02d0f886ad14d5204ae33b964631ad56f3e3f50abb3e216558156

  • SHA512

    f01741a63acd0ab1fe2ef042b388ff0864b60dbb6007d4468f9aed18900cda677d323cf569e2647b36fa71f13d420372c6e09a43815a8ae2b03ae7c5960456e2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL5JYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      909ce4c47ae02d0f886ad14d5204ae33b964631ad56f3e3f50abb3e216558156

    • Size

      51KB

    • MD5

      e94857d3eb7d56a2a9ba99927ea2daab

    • SHA1

      7134072136ad26a4b924c7155f6d56c697f49d66

    • SHA256

      909ce4c47ae02d0f886ad14d5204ae33b964631ad56f3e3f50abb3e216558156

    • SHA512

      f01741a63acd0ab1fe2ef042b388ff0864b60dbb6007d4468f9aed18900cda677d323cf569e2647b36fa71f13d420372c6e09a43815a8ae2b03ae7c5960456e2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL5JYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks