General

  • Target

    7f19c5e904dbedf8263e69b357eba47dc26bcd48fd5c6173c254d2da4804809e

  • Size

    51KB

  • Sample

    240609-g86vgaff76

  • MD5

    0b7d26de25ca7d5e2977b8ddf2f5f515

  • SHA1

    861c5e784c92701f15cf56f5fb8bbd4e9aecb196

  • SHA256

    7f19c5e904dbedf8263e69b357eba47dc26bcd48fd5c6173c254d2da4804809e

  • SHA512

    919df5c2ffccf1c8393904e548a768d347e4aaf590c2025bf4a2a57dbdfdc8321bdef120af389cf978446598b3dea63ec5e05719153aeec0075a3bb24a2257ea

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7f19c5e904dbedf8263e69b357eba47dc26bcd48fd5c6173c254d2da4804809e

    • Size

      51KB

    • MD5

      0b7d26de25ca7d5e2977b8ddf2f5f515

    • SHA1

      861c5e784c92701f15cf56f5fb8bbd4e9aecb196

    • SHA256

      7f19c5e904dbedf8263e69b357eba47dc26bcd48fd5c6173c254d2da4804809e

    • SHA512

      919df5c2ffccf1c8393904e548a768d347e4aaf590c2025bf4a2a57dbdfdc8321bdef120af389cf978446598b3dea63ec5e05719153aeec0075a3bb24a2257ea

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks