General

  • Target

    e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

  • Size

    51KB

  • Sample

    240522-r1z23aef48

  • MD5

    f93fb904624b05d422b0beda8ca9b90b

  • SHA1

    204a276fae86cb89cb4e9b5a271375a84179e428

  • SHA256

    e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

  • SHA512

    06557ab75eb1ad9ff6d0e2ee66a7933cc56d559efd9764c9d10cdf965247acbc6b5c31f07518997d6fbb88f9f7a72d12e52964b7175e9f0ef9c4cf7ee343b607

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frAoLbJYH5:1dWubF3n9S91BF3f0o/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

    • Size

      51KB

    • MD5

      f93fb904624b05d422b0beda8ca9b90b

    • SHA1

      204a276fae86cb89cb4e9b5a271375a84179e428

    • SHA256

      e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

    • SHA512

      06557ab75eb1ad9ff6d0e2ee66a7933cc56d559efd9764c9d10cdf965247acbc6b5c31f07518997d6fbb88f9f7a72d12e52964b7175e9f0ef9c4cf7ee343b607

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frAoLbJYH5:1dWubF3n9S91BF3f0o/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks