General

  • Target

    637f7487490e54c4855f87edb339a616acb80bd7ea2756122bfd47ce1ade4267

  • Size

    51KB

  • Sample

    240526-mvc8wsfe6x

  • MD5

    84e30fe52ff7a7ca6f3197c16d7fa587

  • SHA1

    2aaa93846a311c037e875dea084425f12908aade

  • SHA256

    637f7487490e54c4855f87edb339a616acb80bd7ea2756122bfd47ce1ade4267

  • SHA512

    c1f1a7c46c89989f26d9c2a7b54f3a4e789aaf49529a1ed5388f305df62837e4342371999ef32d335840b4c6506fbaac2644782b47cbecbbe553eefb01395825

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbo4JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      637f7487490e54c4855f87edb339a616acb80bd7ea2756122bfd47ce1ade4267

    • Size

      51KB

    • MD5

      84e30fe52ff7a7ca6f3197c16d7fa587

    • SHA1

      2aaa93846a311c037e875dea084425f12908aade

    • SHA256

      637f7487490e54c4855f87edb339a616acb80bd7ea2756122bfd47ce1ade4267

    • SHA512

      c1f1a7c46c89989f26d9c2a7b54f3a4e789aaf49529a1ed5388f305df62837e4342371999ef32d335840b4c6506fbaac2644782b47cbecbbe553eefb01395825

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbo4JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks