General

  • Target

    956e33528804d0886b1d8b0041207bb1704c53dbab0de3291897020b640ba2c1

  • Size

    51KB

  • Sample

    240527-rbk7lseh4s

  • MD5

    5ab7809479272d88504658d97ed48dc3

  • SHA1

    5bc7072dd4cafd0225ffb38891a83e980183943a

  • SHA256

    956e33528804d0886b1d8b0041207bb1704c53dbab0de3291897020b640ba2c1

  • SHA512

    01ecad5ba11ef357a1f93eb64678acf18512a84d6df78d3d1e7521a1573aeb77c050e0ebc91463c73cb671ad450dd09727e9346506cee6dcd9690a6120ab500a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fbo5JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      956e33528804d0886b1d8b0041207bb1704c53dbab0de3291897020b640ba2c1

    • Size

      51KB

    • MD5

      5ab7809479272d88504658d97ed48dc3

    • SHA1

      5bc7072dd4cafd0225ffb38891a83e980183943a

    • SHA256

      956e33528804d0886b1d8b0041207bb1704c53dbab0de3291897020b640ba2c1

    • SHA512

      01ecad5ba11ef357a1f93eb64678acf18512a84d6df78d3d1e7521a1573aeb77c050e0ebc91463c73cb671ad450dd09727e9346506cee6dcd9690a6120ab500a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fbo5JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks