General

  • Target

    f0bc265fc5de5f5f406440a23e67800724aeacf3128831d50c4af491ffb3bcec

  • Size

    51KB

  • Sample

    240528-p399psfb98

  • MD5

    bea76be73f43ef302846fc27b6f8be8d

  • SHA1

    31e91ac37461a6e2b71720937cf9a04f650d6964

  • SHA256

    f0bc265fc5de5f5f406440a23e67800724aeacf3128831d50c4af491ffb3bcec

  • SHA512

    c50c0913c3f8fdbe47a0a9b81e366e6f3594528e89ee69ea7d912a1a52bd8c5ae4f5db0e97511661e9453297b80906d67f34ac5471dc763722355a5e6c8267c3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboSJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f0bc265fc5de5f5f406440a23e67800724aeacf3128831d50c4af491ffb3bcec

    • Size

      51KB

    • MD5

      bea76be73f43ef302846fc27b6f8be8d

    • SHA1

      31e91ac37461a6e2b71720937cf9a04f650d6964

    • SHA256

      f0bc265fc5de5f5f406440a23e67800724aeacf3128831d50c4af491ffb3bcec

    • SHA512

      c50c0913c3f8fdbe47a0a9b81e366e6f3594528e89ee69ea7d912a1a52bd8c5ae4f5db0e97511661e9453297b80906d67f34ac5471dc763722355a5e6c8267c3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboSJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks