General

  • Target

    cf29bd35edd12e6d00e0bfe913d7e065f6613cef07d924d30e062e1e7163d74d

  • Size

    51KB

  • Sample

    240510-h4qhcsdc37

  • MD5

    84cd7e523b4409914cd0e0b1ccfbe60e

  • SHA1

    3e418a831f36245bbcd5e3c4c043d670fd457005

  • SHA256

    cf29bd35edd12e6d00e0bfe913d7e065f6613cef07d924d30e062e1e7163d74d

  • SHA512

    7c39c1623e0084bb382cda04a7d2c3c4045685ee095179af0e1741bd7fbb11ff5e896768eae75dd7da46660c5babb5e0a382b89ee10444662f632a7bbbbdeb11

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboVJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      cf29bd35edd12e6d00e0bfe913d7e065f6613cef07d924d30e062e1e7163d74d

    • Size

      51KB

    • MD5

      84cd7e523b4409914cd0e0b1ccfbe60e

    • SHA1

      3e418a831f36245bbcd5e3c4c043d670fd457005

    • SHA256

      cf29bd35edd12e6d00e0bfe913d7e065f6613cef07d924d30e062e1e7163d74d

    • SHA512

      7c39c1623e0084bb382cda04a7d2c3c4045685ee095179af0e1741bd7fbb11ff5e896768eae75dd7da46660c5babb5e0a382b89ee10444662f632a7bbbbdeb11

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboVJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks