General

  • Target

    a12a5f7dbab628a443c423b2fe411458bb7f2f3f9a852493cf27dc62c6ef2fe6

  • Size

    51KB

  • Sample

    240604-1b4tdsca7z

  • MD5

    11384c7edfe5322b00a52142fc96842e

  • SHA1

    1b6f32548e678868a48fff9ff811d37cb0c1ad55

  • SHA256

    a12a5f7dbab628a443c423b2fe411458bb7f2f3f9a852493cf27dc62c6ef2fe6

  • SHA512

    08bb85928e4555545d0d4c70ec15cb362969a5fda50f8fda628a79656072e6d847585a96d599195f1146993642931669bc14f100a476a771785da5d4b549880b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fboEJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      a12a5f7dbab628a443c423b2fe411458bb7f2f3f9a852493cf27dc62c6ef2fe6

    • Size

      51KB

    • MD5

      11384c7edfe5322b00a52142fc96842e

    • SHA1

      1b6f32548e678868a48fff9ff811d37cb0c1ad55

    • SHA256

      a12a5f7dbab628a443c423b2fe411458bb7f2f3f9a852493cf27dc62c6ef2fe6

    • SHA512

      08bb85928e4555545d0d4c70ec15cb362969a5fda50f8fda628a79656072e6d847585a96d599195f1146993642931669bc14f100a476a771785da5d4b549880b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fboEJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks