General

  • Target

    322c44ace10a431cb07f70c1f1e39283b132d8044fb30c049bd482a684590aa5

  • Size

    51KB

  • Sample

    240526-ggmmhsgh9x

  • MD5

    2a2d398e3343811a31f769e1c55a3667

  • SHA1

    16e143185c9337aba75ce606728b5fa0d788f1ed

  • SHA256

    322c44ace10a431cb07f70c1f1e39283b132d8044fb30c049bd482a684590aa5

  • SHA512

    2de3c069aea37ba6d58d033d36d6d6c99146f85566e0713e9436ae6cf05b24b0c9245da91b6ea79eb47930b8e0163f3be4a791b33b03e8db3e364d7038004e98

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      322c44ace10a431cb07f70c1f1e39283b132d8044fb30c049bd482a684590aa5

    • Size

      51KB

    • MD5

      2a2d398e3343811a31f769e1c55a3667

    • SHA1

      16e143185c9337aba75ce606728b5fa0d788f1ed

    • SHA256

      322c44ace10a431cb07f70c1f1e39283b132d8044fb30c049bd482a684590aa5

    • SHA512

      2de3c069aea37ba6d58d033d36d6d6c99146f85566e0713e9436ae6cf05b24b0c9245da91b6ea79eb47930b8e0163f3be4a791b33b03e8db3e364d7038004e98

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fboQJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks