General

  • Target

    a20945d8b8f815fe0d5d7bfa16767f01498ae32b14dcdb34713bdc7f3a85ce48

  • Size

    51KB

  • Sample

    240603-r3vv5abb39

  • MD5

    948d260067629e0cc9d14ea199d2d562

  • SHA1

    34b5de1e6b0176de074214caa476ac2412b607e5

  • SHA256

    a20945d8b8f815fe0d5d7bfa16767f01498ae32b14dcdb34713bdc7f3a85ce48

  • SHA512

    8940825195b5dec50533b41682030dcc797481c0e27f86dbef7b3543b9c0403fbbdad86f02feb1ce75cbce68bc076df677af580603c9234ec21c9a73a5d0ca54

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLZJYH5:1dWubF3n9S91BF3fboFJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      a20945d8b8f815fe0d5d7bfa16767f01498ae32b14dcdb34713bdc7f3a85ce48

    • Size

      51KB

    • MD5

      948d260067629e0cc9d14ea199d2d562

    • SHA1

      34b5de1e6b0176de074214caa476ac2412b607e5

    • SHA256

      a20945d8b8f815fe0d5d7bfa16767f01498ae32b14dcdb34713bdc7f3a85ce48

    • SHA512

      8940825195b5dec50533b41682030dcc797481c0e27f86dbef7b3543b9c0403fbbdad86f02feb1ce75cbce68bc076df677af580603c9234ec21c9a73a5d0ca54

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLZJYH5:1dWubF3n9S91BF3fboFJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks