General

  • Target

    b25fff0cec38c2f1e2c3957b34c1ae40_NeikiAnalytics

  • Size

    51KB

  • Sample

    240516-hb6c4sgb5v

  • MD5

    b25fff0cec38c2f1e2c3957b34c1ae40

  • SHA1

    603ae1bf94e6d222004146b5061297884c15903c

  • SHA256

    c3dc30a6484f858e3369f981528f112c3a0c6556ad8ab13f8b8120e84dfa166c

  • SHA512

    9188346a023b7809e349ef4b5e10f9f984d4c19baa48962e04858b704269bbefd7ff26b353ea3d68b27c53da801c2af38fa3b4ccf54d1e63c26fd03285814995

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbooJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b25fff0cec38c2f1e2c3957b34c1ae40_NeikiAnalytics

    • Size

      51KB

    • MD5

      b25fff0cec38c2f1e2c3957b34c1ae40

    • SHA1

      603ae1bf94e6d222004146b5061297884c15903c

    • SHA256

      c3dc30a6484f858e3369f981528f112c3a0c6556ad8ab13f8b8120e84dfa166c

    • SHA512

      9188346a023b7809e349ef4b5e10f9f984d4c19baa48962e04858b704269bbefd7ff26b353ea3d68b27c53da801c2af38fa3b4ccf54d1e63c26fd03285814995

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbooJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks