General

  • Target

    54eafb559e7628c186d6b4fb8838bf9e5408bb3e73494af1526333cb8e896dff

  • Size

    51KB

  • Sample

    240527-31ayqaga49

  • MD5

    8485399c0940c4a64f4c7d1a2b4bca00

  • SHA1

    25d8ac82f134270731cccef78e4f7d0e63c20b08

  • SHA256

    54eafb559e7628c186d6b4fb8838bf9e5408bb3e73494af1526333cb8e896dff

  • SHA512

    6610a0cf8e9877ed7770127035a3254dca16acf53c57a6fbf18b259f1867edd09f340a57084706d8b6466d8b97c460dbbe18a1e7f0b73bc1abe078f3756e8476

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbo7JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      54eafb559e7628c186d6b4fb8838bf9e5408bb3e73494af1526333cb8e896dff

    • Size

      51KB

    • MD5

      8485399c0940c4a64f4c7d1a2b4bca00

    • SHA1

      25d8ac82f134270731cccef78e4f7d0e63c20b08

    • SHA256

      54eafb559e7628c186d6b4fb8838bf9e5408bb3e73494af1526333cb8e896dff

    • SHA512

      6610a0cf8e9877ed7770127035a3254dca16acf53c57a6fbf18b259f1867edd09f340a57084706d8b6466d8b97c460dbbe18a1e7f0b73bc1abe078f3756e8476

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbo7JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks