General

  • Target

    9156d2dc9a2ca5b58fcea5b6319001073ef4fb4ac95b931ac7f266e94286d8d1

  • Size

    51KB

  • Sample

    240509-spkcxage2s

  • MD5

    b1627888ef98330b5019672c6da92ea4

  • SHA1

    7520982f7b58fd440e66c19135264b612752e384

  • SHA256

    9156d2dc9a2ca5b58fcea5b6319001073ef4fb4ac95b931ac7f266e94286d8d1

  • SHA512

    4b4d4f63922bf71003ec28fbe32c2f4fe31caa3b88991bba7f1e7aacdc4f2624ba8426a505c6199f46431b6d482c1215a4ccde08f240fe6acd14b33286fffae2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL6JYH5:1dWubF3n9S91BF3fboGJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9156d2dc9a2ca5b58fcea5b6319001073ef4fb4ac95b931ac7f266e94286d8d1

    • Size

      51KB

    • MD5

      b1627888ef98330b5019672c6da92ea4

    • SHA1

      7520982f7b58fd440e66c19135264b612752e384

    • SHA256

      9156d2dc9a2ca5b58fcea5b6319001073ef4fb4ac95b931ac7f266e94286d8d1

    • SHA512

      4b4d4f63922bf71003ec28fbe32c2f4fe31caa3b88991bba7f1e7aacdc4f2624ba8426a505c6199f46431b6d482c1215a4ccde08f240fe6acd14b33286fffae2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL6JYH5:1dWubF3n9S91BF3fboGJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks