General

  • Target

    e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

  • Size

    51KB

  • Sample

    240525-s2mzkahf95

  • MD5

    07ca65aed8fe2d445719fd56830f185d

  • SHA1

    856884681df2fce152bf32a4f0cf604144dc589d

  • SHA256

    e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

  • SHA512

    6cb474bf6de902af9b32256893824b1ac9e18b0275b16d9d685bb57f308d95db19e390943ac1cd5cf821aa24528f64a1979bf5c25ce41710eeb6f434f0d5a674

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frDoLnJYH5:1dWubF3n9S91BF3f/o7JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

    • Size

      51KB

    • MD5

      07ca65aed8fe2d445719fd56830f185d

    • SHA1

      856884681df2fce152bf32a4f0cf604144dc589d

    • SHA256

      e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

    • SHA512

      6cb474bf6de902af9b32256893824b1ac9e18b0275b16d9d685bb57f308d95db19e390943ac1cd5cf821aa24528f64a1979bf5c25ce41710eeb6f434f0d5a674

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frDoLnJYH5:1dWubF3n9S91BF3f/o7JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks