General

  • Target

    bec80d075bf77a7392aa902b34224f364e9b9e2755e9f7e2d0c51db9347885ee

  • Size

    51KB

  • Sample

    240603-kdsk5sad57

  • MD5

    b593d63c2c0e5383053e12da3c2cdbef

  • SHA1

    98ec699d641cd75110640a95d881e41db062eb46

  • SHA256

    bec80d075bf77a7392aa902b34224f364e9b9e2755e9f7e2d0c51db9347885ee

  • SHA512

    1180669169732747cc9d48e440422fcdea06672bf24ab2fb437846eb3588a3a135f1505d9d58371595b89297c9c6bfbe9a6e8047d1abad0c75653af4d7769c6c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fboBJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      bec80d075bf77a7392aa902b34224f364e9b9e2755e9f7e2d0c51db9347885ee

    • Size

      51KB

    • MD5

      b593d63c2c0e5383053e12da3c2cdbef

    • SHA1

      98ec699d641cd75110640a95d881e41db062eb46

    • SHA256

      bec80d075bf77a7392aa902b34224f364e9b9e2755e9f7e2d0c51db9347885ee

    • SHA512

      1180669169732747cc9d48e440422fcdea06672bf24ab2fb437846eb3588a3a135f1505d9d58371595b89297c9c6bfbe9a6e8047d1abad0c75653af4d7769c6c

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fboBJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks