General

  • Target

    b5027424a6f02c6f25d08a1ee26f223627a61325b3850f1aee1b430f7cd8b44d

  • Size

    51KB

  • Sample

    240603-g85meafh54

  • MD5

    783307a7032ffd00c798337ba203badc

  • SHA1

    6d57bbdc29c21822828e81156fd134982cfcd43b

  • SHA256

    b5027424a6f02c6f25d08a1ee26f223627a61325b3850f1aee1b430f7cd8b44d

  • SHA512

    6c01d73cea786b5179868b15fce38e0f593553a8e8a0e915ba85efc79ea90fe64d3036a3e6c0b6fe152c4ebfb599ce665a58ff0651eb4e1c3679d1686e4c57dd

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboeJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b5027424a6f02c6f25d08a1ee26f223627a61325b3850f1aee1b430f7cd8b44d

    • Size

      51KB

    • MD5

      783307a7032ffd00c798337ba203badc

    • SHA1

      6d57bbdc29c21822828e81156fd134982cfcd43b

    • SHA256

      b5027424a6f02c6f25d08a1ee26f223627a61325b3850f1aee1b430f7cd8b44d

    • SHA512

      6c01d73cea786b5179868b15fce38e0f593553a8e8a0e915ba85efc79ea90fe64d3036a3e6c0b6fe152c4ebfb599ce665a58ff0651eb4e1c3679d1686e4c57dd

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fboeJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks