General

  • Target

    91120d41f8163021be6662abc0c8d89bb6d3a73362e9f16b54f751af326cee33

  • Size

    51KB

  • Sample

    240524-a5fesafb2y

  • MD5

    bd8ff73eae62f6b9c04a0fc2dea1ce10

  • SHA1

    8fe50bd9fb90734af2cb5678c5fd050933c2186e

  • SHA256

    91120d41f8163021be6662abc0c8d89bb6d3a73362e9f16b54f751af326cee33

  • SHA512

    657f2e929aedb817c5613c08467d4ca44972fa70e360001f042bcaa74071e15891dcb61560feabe7b54be0f2ac0d5a45482cf1ae490b7c5b8e8b52cf95dfa7c2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbo2JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      91120d41f8163021be6662abc0c8d89bb6d3a73362e9f16b54f751af326cee33

    • Size

      51KB

    • MD5

      bd8ff73eae62f6b9c04a0fc2dea1ce10

    • SHA1

      8fe50bd9fb90734af2cb5678c5fd050933c2186e

    • SHA256

      91120d41f8163021be6662abc0c8d89bb6d3a73362e9f16b54f751af326cee33

    • SHA512

      657f2e929aedb817c5613c08467d4ca44972fa70e360001f042bcaa74071e15891dcb61560feabe7b54be0f2ac0d5a45482cf1ae490b7c5b8e8b52cf95dfa7c2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbo2JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks