General

  • Target

    522746446c997a0742144ee3efa2e0a3c12e374c66b375493d4546fb5b60e654

  • Size

    51KB

  • Sample

    240604-3jsr7sfb8x

  • MD5

    544acdad5203bcd2730a010bbc7042c5

  • SHA1

    e8f30d6b5a54efcc3e5a8f7f9d1f1539c7e26549

  • SHA256

    522746446c997a0742144ee3efa2e0a3c12e374c66b375493d4546fb5b60e654

  • SHA512

    9a07fb8c211ebee5fabe754284553d40953262d1c8eb265755b04a0ae2ab055834e286e3f916aa64be6b15e1fbd1216f4fbe376bd0265c993c879399f0d4874d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      522746446c997a0742144ee3efa2e0a3c12e374c66b375493d4546fb5b60e654

    • Size

      51KB

    • MD5

      544acdad5203bcd2730a010bbc7042c5

    • SHA1

      e8f30d6b5a54efcc3e5a8f7f9d1f1539c7e26549

    • SHA256

      522746446c997a0742144ee3efa2e0a3c12e374c66b375493d4546fb5b60e654

    • SHA512

      9a07fb8c211ebee5fabe754284553d40953262d1c8eb265755b04a0ae2ab055834e286e3f916aa64be6b15e1fbd1216f4fbe376bd0265c993c879399f0d4874d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks