General

  • Target

    963364a366a3d5320a9b4e043457ffdfa7e7680660763e39f18bbc725f6233fb

  • Size

    51KB

  • Sample

    240517-nf7pmafc4v

  • MD5

    d8dca6dc6343d1238fc512c48c8dad71

  • SHA1

    7f9fe035a84319021cc020df08b6f176b956507e

  • SHA256

    963364a366a3d5320a9b4e043457ffdfa7e7680660763e39f18bbc725f6233fb

  • SHA512

    e05806fd63b7cc9da27ffa5c18d96c1c0cf5c8d4c82aba4254dc410469b98ea631ea30068b0efa81fe81ca6271dcac479180db534758a058f6b53d7ada0e4f06

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboGJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      963364a366a3d5320a9b4e043457ffdfa7e7680660763e39f18bbc725f6233fb

    • Size

      51KB

    • MD5

      d8dca6dc6343d1238fc512c48c8dad71

    • SHA1

      7f9fe035a84319021cc020df08b6f176b956507e

    • SHA256

      963364a366a3d5320a9b4e043457ffdfa7e7680660763e39f18bbc725f6233fb

    • SHA512

      e05806fd63b7cc9da27ffa5c18d96c1c0cf5c8d4c82aba4254dc410469b98ea631ea30068b0efa81fe81ca6271dcac479180db534758a058f6b53d7ada0e4f06

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboGJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks