General

  • Target

    e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

  • Size

    51KB

  • MD5

    f93fb904624b05d422b0beda8ca9b90b

  • SHA1

    204a276fae86cb89cb4e9b5a271375a84179e428

  • SHA256

    e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d

  • SHA512

    06557ab75eb1ad9ff6d0e2ee66a7933cc56d559efd9764c9d10cdf965247acbc6b5c31f07518997d6fbb88f9f7a72d12e52964b7175e9f0ef9c4cf7ee343b607

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frAoLbJYH5:1dWubF3n9S91BF3f0o/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e21b7f2b65b63803a85cdf5c9b7286412033b53fe908bc8389fbc0b30618037d
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections