General

  • Target

    1ee2a306fe7bd90a9745984ff8f5e4c712936bb0e30610d2dd9a8378d3f23af5

  • Size

    51KB

  • Sample

    240515-ex384agg6y

  • MD5

    443ea47ebb0fe98ae32a8b8b808fb20c

  • SHA1

    21cb3c2b84357d6ed03f2fb9ae29e636041414eb

  • SHA256

    1ee2a306fe7bd90a9745984ff8f5e4c712936bb0e30610d2dd9a8378d3f23af5

  • SHA512

    b57a195d475aca44da2d7f32720d12f42f903fbc793f54842e1e927d59f8db985a4f24babb749c0ce289947dd5d48f67a37524f8d34632af9b614352c563f2bd

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      1ee2a306fe7bd90a9745984ff8f5e4c712936bb0e30610d2dd9a8378d3f23af5

    • Size

      51KB

    • MD5

      443ea47ebb0fe98ae32a8b8b808fb20c

    • SHA1

      21cb3c2b84357d6ed03f2fb9ae29e636041414eb

    • SHA256

      1ee2a306fe7bd90a9745984ff8f5e4c712936bb0e30610d2dd9a8378d3f23af5

    • SHA512

      b57a195d475aca44da2d7f32720d12f42f903fbc793f54842e1e927d59f8db985a4f24babb749c0ce289947dd5d48f67a37524f8d34632af9b614352c563f2bd

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLhJYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks