General

  • Target

    9c5c68ee1c6ab343f365171af64d646c7880ba7c646ef36e1db61efd4c32117a

  • Size

    51KB

  • Sample

    240531-lhzexsde51

  • MD5

    bcf41fd47a4dfa18d7008266c2097927

  • SHA1

    a051a8c1dacb15a9d2f49e052a550850b512193b

  • SHA256

    9c5c68ee1c6ab343f365171af64d646c7880ba7c646ef36e1db61efd4c32117a

  • SHA512

    b0427f28aaeaad631ecd594ea7d9c6f8c154fa1c7fa32fae4e70dc0a43f95c788a5a9448ca3e90b58cfc0dc1d8866f737af1aa09cbd692ce6f9c3bc7aa522033

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9c5c68ee1c6ab343f365171af64d646c7880ba7c646ef36e1db61efd4c32117a

    • Size

      51KB

    • MD5

      bcf41fd47a4dfa18d7008266c2097927

    • SHA1

      a051a8c1dacb15a9d2f49e052a550850b512193b

    • SHA256

      9c5c68ee1c6ab343f365171af64d646c7880ba7c646ef36e1db61efd4c32117a

    • SHA512

      b0427f28aaeaad631ecd594ea7d9c6f8c154fa1c7fa32fae4e70dc0a43f95c788a5a9448ca3e90b58cfc0dc1d8866f737af1aa09cbd692ce6f9c3bc7aa522033

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks