General

  • Target

    6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

  • Size

    51KB

  • MD5

    078cc666bed4ace4c4dfb2729f4a89fb

  • SHA1

    ba17335ce75be071c8b38c3058a1154634fa0899

  • SHA256

    6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d

  • SHA512

    6db22c9944aa9f8ff76bbf3e4a5ff0217cc4e5062b4a01a151c8b595483659205ad69b89f8d488e80a2a387e1b6db35f59fbbb3898d6a00f6569d67ee8f6247e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frxroL4JYH5:1dWubF3n9S91BF3fNro8JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6919bec7ec6cbdb7181ef5dded9b95360999553b79be22cd15a2d2c4c5399a3d
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections