General

  • Target

    3c17de87987398ff015e0753d8a07604a3be2d48ce8d8593da8a6e764453f711

  • Size

    51KB

  • Sample

    240611-3gvtsawbjk

  • MD5

    56984a44a4fc1b0395e36b2f365b28c2

  • SHA1

    3cc7d5f7a8e9e48caae087742fe248e1ea3cbc6e

  • SHA256

    3c17de87987398ff015e0753d8a07604a3be2d48ce8d8593da8a6e764453f711

  • SHA512

    4e24eee6c1cae6e84ba78c41abed93da6ebd6c8560f89d6a8b1752dce94fb122dd195c37903b7bb5fc88c2c5d8cbda622a4c9c5897ae68db730aa45f9f91a3bc

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3c17de87987398ff015e0753d8a07604a3be2d48ce8d8593da8a6e764453f711

    • Size

      51KB

    • MD5

      56984a44a4fc1b0395e36b2f365b28c2

    • SHA1

      3cc7d5f7a8e9e48caae087742fe248e1ea3cbc6e

    • SHA256

      3c17de87987398ff015e0753d8a07604a3be2d48ce8d8593da8a6e764453f711

    • SHA512

      4e24eee6c1cae6e84ba78c41abed93da6ebd6c8560f89d6a8b1752dce94fb122dd195c37903b7bb5fc88c2c5d8cbda622a4c9c5897ae68db730aa45f9f91a3bc

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbouJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks