General

  • Target

    fa124542424222197a1cdead78ceb149eefe43ecbcfd4425664b369286ebf118

  • Size

    51KB

  • Sample

    240526-pqf54acg6z

  • MD5

    bb49246b629f5336e5713215af2990bc

  • SHA1

    28d14766983e24888bc6a82ee8c9410c15a5c9e2

  • SHA256

    fa124542424222197a1cdead78ceb149eefe43ecbcfd4425664b369286ebf118

  • SHA512

    80b1a433c8e7cbbc519f9ffb9a46ccb730a46150e7403c06d0dc25028e4af7fcb66d6e4f46f255f8091d508747d4dd23932e538075063dea60cd238381d29a97

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fbosJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      fa124542424222197a1cdead78ceb149eefe43ecbcfd4425664b369286ebf118

    • Size

      51KB

    • MD5

      bb49246b629f5336e5713215af2990bc

    • SHA1

      28d14766983e24888bc6a82ee8c9410c15a5c9e2

    • SHA256

      fa124542424222197a1cdead78ceb149eefe43ecbcfd4425664b369286ebf118

    • SHA512

      80b1a433c8e7cbbc519f9ffb9a46ccb730a46150e7403c06d0dc25028e4af7fcb66d6e4f46f255f8091d508747d4dd23932e538075063dea60cd238381d29a97

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fbosJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks