General

  • Target

    30080a45b061361d794b58fdd43bfafc3161252ff7019713b01f2d8db9856a1f

  • Size

    51KB

  • Sample

    240603-kfa4waad96

  • MD5

    1a65e6854330562844a24d606ce5b7c6

  • SHA1

    dfb29cf4e0f41a87bf54bb1cd537bfc327df6589

  • SHA256

    30080a45b061361d794b58fdd43bfafc3161252ff7019713b01f2d8db9856a1f

  • SHA512

    afe54b761d0973bfe4de1c9f67ffe619e5230e3c5b26cf9ec48e0dfe8bd4d1b339a563d4ccda82dd06b479e4bd102307c4a0ef4dc0d4a1473f19e44525af87d9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fboTJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      30080a45b061361d794b58fdd43bfafc3161252ff7019713b01f2d8db9856a1f

    • Size

      51KB

    • MD5

      1a65e6854330562844a24d606ce5b7c6

    • SHA1

      dfb29cf4e0f41a87bf54bb1cd537bfc327df6589

    • SHA256

      30080a45b061361d794b58fdd43bfafc3161252ff7019713b01f2d8db9856a1f

    • SHA512

      afe54b761d0973bfe4de1c9f67ffe619e5230e3c5b26cf9ec48e0dfe8bd4d1b339a563d4ccda82dd06b479e4bd102307c4a0ef4dc0d4a1473f19e44525af87d9

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fboTJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks