General

  • Target

    e75235d583171c26d605c379fd5b1ed40bc0213a15d7f20ef276161222981338

  • Size

    51KB

  • Sample

    240603-mljdjscf73

  • MD5

    ba062e8fc19f82a57de74909bac312db

  • SHA1

    48907b5682945599c9d7f8965d045c45591818ac

  • SHA256

    e75235d583171c26d605c379fd5b1ed40bc0213a15d7f20ef276161222981338

  • SHA512

    4ae8347e3576e67abfb82fab517afd1e3e11839a7b73f27468a34b200a6d4581cc6f6bb652688fdf0815cf06f6b41c740bc8902fac6fb7b6c11122d3acba88a7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fboIJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e75235d583171c26d605c379fd5b1ed40bc0213a15d7f20ef276161222981338

    • Size

      51KB

    • MD5

      ba062e8fc19f82a57de74909bac312db

    • SHA1

      48907b5682945599c9d7f8965d045c45591818ac

    • SHA256

      e75235d583171c26d605c379fd5b1ed40bc0213a15d7f20ef276161222981338

    • SHA512

      4ae8347e3576e67abfb82fab517afd1e3e11839a7b73f27468a34b200a6d4581cc6f6bb652688fdf0815cf06f6b41c740bc8902fac6fb7b6c11122d3acba88a7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fboIJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks