General

  • Target

    593b217fe4930ebadebda644259c5923f00946fecac31d7bc55475d61523984c

  • Size

    51KB

  • Sample

    240526-mbj74aeg9y

  • MD5

    68a0d7abac34271f942ce42cc8c2afa3

  • SHA1

    6e3557a178a10132fc89b9b4d48d7e6da0e2ceaa

  • SHA256

    593b217fe4930ebadebda644259c5923f00946fecac31d7bc55475d61523984c

  • SHA512

    3a8210c2b0d912d7c9feb7f3f09d8d8e3b3990e3d041f50b616767ba42b4eeca983964f1a27bbf485b36cb92d45123f44a1c7c28bcbd2a70f1cd329f5da3642b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+WJYH5:1dWubF3n9S91BF3fbohJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      593b217fe4930ebadebda644259c5923f00946fecac31d7bc55475d61523984c

    • Size

      51KB

    • MD5

      68a0d7abac34271f942ce42cc8c2afa3

    • SHA1

      6e3557a178a10132fc89b9b4d48d7e6da0e2ceaa

    • SHA256

      593b217fe4930ebadebda644259c5923f00946fecac31d7bc55475d61523984c

    • SHA512

      3a8210c2b0d912d7c9feb7f3f09d8d8e3b3990e3d041f50b616767ba42b4eeca983964f1a27bbf485b36cb92d45123f44a1c7c28bcbd2a70f1cd329f5da3642b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+WJYH5:1dWubF3n9S91BF3fbohJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks