General

  • Target

    01e4326da17e408b6b619c48a36130839632db999bdf34cf8ff4a24d6aca5c11

  • Size

    51KB

  • Sample

    240512-y1f3hsed2t

  • MD5

    2869644b4cfb666f26ab35d92c8ae331

  • SHA1

    5e2568097999766dbde0035a3af6692fa41625fc

  • SHA256

    01e4326da17e408b6b619c48a36130839632db999bdf34cf8ff4a24d6aca5c11

  • SHA512

    50b0e532281c683ac88ab32cb8a085f488021556541e34e52a885377689aa669f33b95053661748f87ebb5578aaa45dd32ef74c32112b7ff319d13fab856ecfe

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      01e4326da17e408b6b619c48a36130839632db999bdf34cf8ff4a24d6aca5c11

    • Size

      51KB

    • MD5

      2869644b4cfb666f26ab35d92c8ae331

    • SHA1

      5e2568097999766dbde0035a3af6692fa41625fc

    • SHA256

      01e4326da17e408b6b619c48a36130839632db999bdf34cf8ff4a24d6aca5c11

    • SHA512

      50b0e532281c683ac88ab32cb8a085f488021556541e34e52a885377689aa669f33b95053661748f87ebb5578aaa45dd32ef74c32112b7ff319d13fab856ecfe

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboQJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks