General

  • Target

    9a4d52eefb0f7d18cdd2152dfc6ac376921dbcf3df46d82fb531bef73c112959

  • Size

    51KB

  • Sample

    240526-2tknxafh72

  • MD5

    09adf049b6cfbd0699ca5e42dbd3f1eb

  • SHA1

    3585b04bb4a074511ba8c86a89ee1dfc2379e6fa

  • SHA256

    9a4d52eefb0f7d18cdd2152dfc6ac376921dbcf3df46d82fb531bef73c112959

  • SHA512

    a295b8e04c67b72ba9d6f4aef86957fe45a5adb4cc9169e80c108b836811bbc7e2ba7e6ebb5a0b27afdd35b44e86ac0e6d0cf568ac51d6ff77314cfda6a9f742

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fborJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9a4d52eefb0f7d18cdd2152dfc6ac376921dbcf3df46d82fb531bef73c112959

    • Size

      51KB

    • MD5

      09adf049b6cfbd0699ca5e42dbd3f1eb

    • SHA1

      3585b04bb4a074511ba8c86a89ee1dfc2379e6fa

    • SHA256

      9a4d52eefb0f7d18cdd2152dfc6ac376921dbcf3df46d82fb531bef73c112959

    • SHA512

      a295b8e04c67b72ba9d6f4aef86957fe45a5adb4cc9169e80c108b836811bbc7e2ba7e6ebb5a0b27afdd35b44e86ac0e6d0cf568ac51d6ff77314cfda6a9f742

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fborJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks