General

  • Target

    46f5a9fbbf8e75f20f99d3b92dc1d620fcc0259953d086da7fce2b566f072934

  • Size

    51KB

  • Sample

    240526-pd8pksbd3s

  • MD5

    7f4ee4be4c1fcfa930baf9ede5cd68b4

  • SHA1

    a134f8ca152fef7b581d94085b8f0777df24478e

  • SHA256

    46f5a9fbbf8e75f20f99d3b92dc1d620fcc0259953d086da7fce2b566f072934

  • SHA512

    81335b6cdf2d660c4604bc6a419f41387cb16a79626dccb04cd2190babe7b5e2658d2ad5c9490ada477124fe6786cd46a2f6cff2c1988c04ef429be8a6d8c728

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboCJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      46f5a9fbbf8e75f20f99d3b92dc1d620fcc0259953d086da7fce2b566f072934

    • Size

      51KB

    • MD5

      7f4ee4be4c1fcfa930baf9ede5cd68b4

    • SHA1

      a134f8ca152fef7b581d94085b8f0777df24478e

    • SHA256

      46f5a9fbbf8e75f20f99d3b92dc1d620fcc0259953d086da7fce2b566f072934

    • SHA512

      81335b6cdf2d660c4604bc6a419f41387cb16a79626dccb04cd2190babe7b5e2658d2ad5c9490ada477124fe6786cd46a2f6cff2c1988c04ef429be8a6d8c728

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboCJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks