General

  • Target

    98612a0486d0df08a79e9ec06234bae04ef1d9c3500fb7921e1cce2f4b9cd71c

  • Size

    51KB

  • MD5

    a9efc17ccfcda136f1e5b807a2d39358

  • SHA1

    bdd49ce8a02dc6e530e37da8d713ed098be6bee6

  • SHA256

    98612a0486d0df08a79e9ec06234bae04ef1d9c3500fb7921e1cce2f4b9cd71c

  • SHA512

    187c3709a8bf312f63237d6dc5d61be0ff035db9913598407f66196c8b235ca67b874eef69d5802ebd61a71da539a216ac89d43976bdbead08132701f385678d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frxroLaJYH5:1dWubF3n9S91BF3fNrouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98612a0486d0df08a79e9ec06234bae04ef1d9c3500fb7921e1cce2f4b9cd71c
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections