General

  • Target

    68c3aa217c77c295076a85500500fd82104d7392c5183e4da9ccc333bc504a28

  • Size

    51KB

  • Sample

    240512-alhe2aad36

  • MD5

    00dabcc1ba1173279e7d88eadbc1f4b2

  • SHA1

    3d9e61cbc5c88c56c340358fc36219cd4a242603

  • SHA256

    68c3aa217c77c295076a85500500fd82104d7392c5183e4da9ccc333bc504a28

  • SHA512

    ff886231802740797f5e3c3f770bcde6502c8613e7106e935ab9a3d942d46105c0dc90cddd07815fb072b7121f6f3aafe457a6f95be5da1962e4b80ab79a73b5

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbomJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      68c3aa217c77c295076a85500500fd82104d7392c5183e4da9ccc333bc504a28

    • Size

      51KB

    • MD5

      00dabcc1ba1173279e7d88eadbc1f4b2

    • SHA1

      3d9e61cbc5c88c56c340358fc36219cd4a242603

    • SHA256

      68c3aa217c77c295076a85500500fd82104d7392c5183e4da9ccc333bc504a28

    • SHA512

      ff886231802740797f5e3c3f770bcde6502c8613e7106e935ab9a3d942d46105c0dc90cddd07815fb072b7121f6f3aafe457a6f95be5da1962e4b80ab79a73b5

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbomJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks