General

  • Target

    11c39847d6012cbbb3d1091efb95c450_NeikiAnalytics.exe

  • Size

    51KB

  • Sample

    240528-2n211agf95

  • MD5

    11c39847d6012cbbb3d1091efb95c450

  • SHA1

    0996389eb4ee213b0105bc7998ab2ae45593ef96

  • SHA256

    b40b5e08b55361511337ed4d506611f1358e3fd95951e84e4911cd950bd463fd

  • SHA512

    8427bc6ef29c8813d681f496372da37d83fa0a3b77b9ab3dd1810cc8fbf35fe94dbeced1f5436aa5a79ee246f1384d9ae7ff8e43e5a40e327dc8c23e8958aa6d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frkoLCJYH5:1dWubF3n9S91BF3fwoeJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      11c39847d6012cbbb3d1091efb95c450_NeikiAnalytics.exe

    • Size

      51KB

    • MD5

      11c39847d6012cbbb3d1091efb95c450

    • SHA1

      0996389eb4ee213b0105bc7998ab2ae45593ef96

    • SHA256

      b40b5e08b55361511337ed4d506611f1358e3fd95951e84e4911cd950bd463fd

    • SHA512

      8427bc6ef29c8813d681f496372da37d83fa0a3b77b9ab3dd1810cc8fbf35fe94dbeced1f5436aa5a79ee246f1384d9ae7ff8e43e5a40e327dc8c23e8958aa6d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frkoLCJYH5:1dWubF3n9S91BF3fwoeJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks