General

  • Target

    bd28bbc856cc6dcbf0db37bcd0e1e9f90f565ec3ce708b359c3ca8299e83c76c

  • Size

    51KB

  • Sample

    240526-psgveada4z

  • MD5

    ded06a9b65929ffe8c163e9840e79bd7

  • SHA1

    e664b3cb466a677ba45e151be65518f260212859

  • SHA256

    bd28bbc856cc6dcbf0db37bcd0e1e9f90f565ec3ce708b359c3ca8299e83c76c

  • SHA512

    b2b19218a05c6d9b76efa3719f7bb1392dd4c8842d448f3ad938cace4bb21b5fc6b64ab5b548c0c97b0704fc1706663beeab181aa32f82b784ef9dc48f38f409

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+BJYH5:1dWubF3n9S91BF3fboaJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      bd28bbc856cc6dcbf0db37bcd0e1e9f90f565ec3ce708b359c3ca8299e83c76c

    • Size

      51KB

    • MD5

      ded06a9b65929ffe8c163e9840e79bd7

    • SHA1

      e664b3cb466a677ba45e151be65518f260212859

    • SHA256

      bd28bbc856cc6dcbf0db37bcd0e1e9f90f565ec3ce708b359c3ca8299e83c76c

    • SHA512

      b2b19218a05c6d9b76efa3719f7bb1392dd4c8842d448f3ad938cace4bb21b5fc6b64ab5b548c0c97b0704fc1706663beeab181aa32f82b784ef9dc48f38f409

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+BJYH5:1dWubF3n9S91BF3fboaJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks