General

  • Target

    c3d337ebf4da05caf596a2578b0546e505fd5a287e3e6eab060ad57cadfc9664

  • Size

    51KB

  • MD5

    304ca9d06634c9dfd58bbfd31a0797c2

  • SHA1

    85552290e379653901fc99cbea085e1917cb71f9

  • SHA256

    c3d337ebf4da05caf596a2578b0546e505fd5a287e3e6eab060ad57cadfc9664

  • SHA512

    68a3f379734ad193b1f8c16bf91ff616c306dd42008e14f0e4ef7e269089fa4aa86e9a48ac9a90f77ac040fb6c9ee2e7522a5e3e03ab6f8b2fc3b0cc874ae9a1

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frDoL+JYH5:1dWubF3n9S91BF3f3oaJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3d337ebf4da05caf596a2578b0546e505fd5a287e3e6eab060ad57cadfc9664
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections