General

  • Target

    bf247f9ea41e1eda3ad9a71177e263ee30b287665bd2d535b563eba3b51977e7

  • Size

    51KB

  • Sample

    240511-cryejsae55

  • MD5

    cc6631d865e645b5096518e3ad1f3827

  • SHA1

    4a44d160d856ef18bf4dc9cc922c71a238aa3f38

  • SHA256

    bf247f9ea41e1eda3ad9a71177e263ee30b287665bd2d535b563eba3b51977e7

  • SHA512

    aa10da0f982125bb337e5118b2f908774b8b1889e4d735ca8fb06875de0d83f006fbd4e37def3b0d1e8f3e46ed92a2bf1d1ed00d94e360941a68093eb8b056ca

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboaJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      bf247f9ea41e1eda3ad9a71177e263ee30b287665bd2d535b563eba3b51977e7

    • Size

      51KB

    • MD5

      cc6631d865e645b5096518e3ad1f3827

    • SHA1

      4a44d160d856ef18bf4dc9cc922c71a238aa3f38

    • SHA256

      bf247f9ea41e1eda3ad9a71177e263ee30b287665bd2d535b563eba3b51977e7

    • SHA512

      aa10da0f982125bb337e5118b2f908774b8b1889e4d735ca8fb06875de0d83f006fbd4e37def3b0d1e8f3e46ed92a2bf1d1ed00d94e360941a68093eb8b056ca

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLWJYH5:1dWubF3n9S91BF3fboaJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks