General

  • Target

    aa29bab5c0ff0751291efebd3ed27f436f9ef903132039aad1d16860c4774f9f

  • Size

    51KB

  • Sample

    240610-2k1c1atcpa

  • MD5

    8902d98a7e72d6f2829fbdf8a6d0855d

  • SHA1

    485a43a5b023bb4301bb54adbcfa0c7e1bb9240e

  • SHA256

    aa29bab5c0ff0751291efebd3ed27f436f9ef903132039aad1d16860c4774f9f

  • SHA512

    7315c7eb64136ce8e2756f3008ff589abff17a56b9e2ab3beff91494e5a6943c52469c689e3387f7859827f65b061d8710289b96d898b95ffe3b41c41a67e966

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fbojJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      aa29bab5c0ff0751291efebd3ed27f436f9ef903132039aad1d16860c4774f9f

    • Size

      51KB

    • MD5

      8902d98a7e72d6f2829fbdf8a6d0855d

    • SHA1

      485a43a5b023bb4301bb54adbcfa0c7e1bb9240e

    • SHA256

      aa29bab5c0ff0751291efebd3ed27f436f9ef903132039aad1d16860c4774f9f

    • SHA512

      7315c7eb64136ce8e2756f3008ff589abff17a56b9e2ab3beff91494e5a6943c52469c689e3387f7859827f65b061d8710289b96d898b95ffe3b41c41a67e966

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fbojJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks