General

  • Target

    989d3a969573a20169a15ad1089c72386e8e1266b543d5315fc73afa4dd74ed4

  • Size

    51KB

  • Sample

    240601-by2vwadg76

  • MD5

    9f14c33f1e9a39610968a5d7027d54c1

  • SHA1

    1c734d7b97782ff648bf59aa0a12b38385622c9a

  • SHA256

    989d3a969573a20169a15ad1089c72386e8e1266b543d5315fc73afa4dd74ed4

  • SHA512

    3484cfb6d432cff9e801c739e08f4efe46dde880f983d10d4310f0dd03b5793f2d93f66b8aacbde047f33724b7c79df940f534a4a732fcdbd51722ca24c0a47d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbofJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      989d3a969573a20169a15ad1089c72386e8e1266b543d5315fc73afa4dd74ed4

    • Size

      51KB

    • MD5

      9f14c33f1e9a39610968a5d7027d54c1

    • SHA1

      1c734d7b97782ff648bf59aa0a12b38385622c9a

    • SHA256

      989d3a969573a20169a15ad1089c72386e8e1266b543d5315fc73afa4dd74ed4

    • SHA512

      3484cfb6d432cff9e801c739e08f4efe46dde880f983d10d4310f0dd03b5793f2d93f66b8aacbde047f33724b7c79df940f534a4a732fcdbd51722ca24c0a47d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbofJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks