General

  • Target

    e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

  • Size

    51KB

  • MD5

    07ca65aed8fe2d445719fd56830f185d

  • SHA1

    856884681df2fce152bf32a4f0cf604144dc589d

  • SHA256

    e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6

  • SHA512

    6cb474bf6de902af9b32256893824b1ac9e18b0275b16d9d685bb57f308d95db19e390943ac1cd5cf821aa24528f64a1979bf5c25ce41710eeb6f434f0d5a674

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frDoLnJYH5:1dWubF3n9S91BF3f/o7JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3cc33b4bd40aa36ed86ea14ab9987b544612b7e989753854a04797d62f0f8c6
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections