General

  • Target

    4b0f1614592cefa517bd599a7018910e91cc4e6a5a09728fef92b3eb8f058f1a

  • Size

    51KB

  • Sample

    240611-3jd9tawbnc

  • MD5

    d8edbd51e82072a70766169e939967d5

  • SHA1

    81196e5c4de4cc91890a858dc630d62fcfafc7ce

  • SHA256

    4b0f1614592cefa517bd599a7018910e91cc4e6a5a09728fef92b3eb8f058f1a

  • SHA512

    5b280e6c6be4c8cb7b9c1e95d1d93d7e97818ebe08c1bf3ff1a65ff1dc6a27148826de93f060cd503470b782af8c3656bf0b04aac3b022082e386dbb911143b9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboyJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4b0f1614592cefa517bd599a7018910e91cc4e6a5a09728fef92b3eb8f058f1a

    • Size

      51KB

    • MD5

      d8edbd51e82072a70766169e939967d5

    • SHA1

      81196e5c4de4cc91890a858dc630d62fcfafc7ce

    • SHA256

      4b0f1614592cefa517bd599a7018910e91cc4e6a5a09728fef92b3eb8f058f1a

    • SHA512

      5b280e6c6be4c8cb7b9c1e95d1d93d7e97818ebe08c1bf3ff1a65ff1dc6a27148826de93f060cd503470b782af8c3656bf0b04aac3b022082e386dbb911143b9

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboyJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks