General

  • Target

    e3af91720312870eaa83906a33a1afc46bbe24fedc996dcb1afce27d52d00921

  • Size

    51KB

  • Sample

    240521-x2me9aff69

  • MD5

    437e4416973e0732da07beb3113a395c

  • SHA1

    7447520176fb3aa614bca30b7298f9cc62b3061b

  • SHA256

    e3af91720312870eaa83906a33a1afc46bbe24fedc996dcb1afce27d52d00921

  • SHA512

    edb9ca5685c4e8b507a141f299224506d888befb2eed4f9715cb5b8d44275254ce3e116ddd8380d04d32ac097a5b1fe1b0023c7abf948e5a01f65a57f4ae9953

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbo8JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e3af91720312870eaa83906a33a1afc46bbe24fedc996dcb1afce27d52d00921

    • Size

      51KB

    • MD5

      437e4416973e0732da07beb3113a395c

    • SHA1

      7447520176fb3aa614bca30b7298f9cc62b3061b

    • SHA256

      e3af91720312870eaa83906a33a1afc46bbe24fedc996dcb1afce27d52d00921

    • SHA512

      edb9ca5685c4e8b507a141f299224506d888befb2eed4f9715cb5b8d44275254ce3e116ddd8380d04d32ac097a5b1fe1b0023c7abf948e5a01f65a57f4ae9953

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbo8JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks