General

  • Target

    1b73dea06d5370dc2af71bc38a9b0d1a141e97ab83081fc434bfe39e3a859f72

  • Size

    51KB

  • Sample

    240527-ysh7xagc8y

  • MD5

    5b299d5481950d8c8df4286b7ee5fbab

  • SHA1

    375ffdee96f27ae3f5e133a4c471b4649d867611

  • SHA256

    1b73dea06d5370dc2af71bc38a9b0d1a141e97ab83081fc434bfe39e3a859f72

  • SHA512

    2efc7c12dee96d0e25dc905daa19af776c7c19c1aed7db8af1a998c44e6dd2de2769d01d51760b470e268df5e9ea243ad04fabd3c1af4b25c0a36dda54d37750

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLXJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      1b73dea06d5370dc2af71bc38a9b0d1a141e97ab83081fc434bfe39e3a859f72

    • Size

      51KB

    • MD5

      5b299d5481950d8c8df4286b7ee5fbab

    • SHA1

      375ffdee96f27ae3f5e133a4c471b4649d867611

    • SHA256

      1b73dea06d5370dc2af71bc38a9b0d1a141e97ab83081fc434bfe39e3a859f72

    • SHA512

      2efc7c12dee96d0e25dc905daa19af776c7c19c1aed7db8af1a998c44e6dd2de2769d01d51760b470e268df5e9ea243ad04fabd3c1af4b25c0a36dda54d37750

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLXJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks