General

  • Target

    fa51a305c331638a15d473d4da2be565fe2a23d3f1ce0a9695e49a4cca5d5780

  • Size

    51KB

  • Sample

    240610-2kfzcstcma

  • MD5

    5bc553e8bc77c0686010f4a719605092

  • SHA1

    27d8edacda9a6a4d62f5ede8b1c7cf5b03e455f5

  • SHA256

    fa51a305c331638a15d473d4da2be565fe2a23d3f1ce0a9695e49a4cca5d5780

  • SHA512

    44888eb7825c81bcb1fb7e91671e2154df4aca8c043871c10ca1b3a0b481c5f18ca600393697c9eef7fb842156bbb6fa92a033647f335d1e2aa8386084bc8a04

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboEJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      fa51a305c331638a15d473d4da2be565fe2a23d3f1ce0a9695e49a4cca5d5780

    • Size

      51KB

    • MD5

      5bc553e8bc77c0686010f4a719605092

    • SHA1

      27d8edacda9a6a4d62f5ede8b1c7cf5b03e455f5

    • SHA256

      fa51a305c331638a15d473d4da2be565fe2a23d3f1ce0a9695e49a4cca5d5780

    • SHA512

      44888eb7825c81bcb1fb7e91671e2154df4aca8c043871c10ca1b3a0b481c5f18ca600393697c9eef7fb842156bbb6fa92a033647f335d1e2aa8386084bc8a04

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboEJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks