General

  • Target

    46ef28a86fdb1d4a0f973106e5c1915250d773e1e1e813bd8cac0eb608018185

  • Size

    51KB

  • MD5

    85453a8826808df3e01285e6a47934a7

  • SHA1

    b9b7d21c5bbe4aed8563909551766b78a268b121

  • SHA256

    46ef28a86fdb1d4a0f973106e5c1915250d773e1e1e813bd8cac0eb608018185

  • SHA512

    edd2b6d62c16056b24879262bac89b21dc6765aa6eef0811c251ec6b7e23a4ab4a31bc939cc4a116f464d4b57f187fb5e9f5640f64c3b20a80e17b85788e7e7f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frxroLPJYH5:1dWubF3n9S91BF3fNroLJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46ef28a86fdb1d4a0f973106e5c1915250d773e1e1e813bd8cac0eb608018185
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections