General

  • Target

    4bdaab2021c7b151d4200af42b368c2d34d73a65a8c0b7b423f2e0095cee39b9

  • Size

    51KB

  • Sample

    240611-3k79aawcjg

  • MD5

    c82f75ce33ecbbf51cc9b1ffe30d93b4

  • SHA1

    2a5e324132ec1b5efd153a61aafb5b6c8fdd88ad

  • SHA256

    4bdaab2021c7b151d4200af42b368c2d34d73a65a8c0b7b423f2e0095cee39b9

  • SHA512

    11f878c7b785e82b93185e15f831f6fdeba93af955feb0adffc7c3028212e47667b4b7de66811519a424bd180e7fb3a572b8580119642432515bcb7c14de1381

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboJJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4bdaab2021c7b151d4200af42b368c2d34d73a65a8c0b7b423f2e0095cee39b9

    • Size

      51KB

    • MD5

      c82f75ce33ecbbf51cc9b1ffe30d93b4

    • SHA1

      2a5e324132ec1b5efd153a61aafb5b6c8fdd88ad

    • SHA256

      4bdaab2021c7b151d4200af42b368c2d34d73a65a8c0b7b423f2e0095cee39b9

    • SHA512

      11f878c7b785e82b93185e15f831f6fdeba93af955feb0adffc7c3028212e47667b4b7de66811519a424bd180e7fb3a572b8580119642432515bcb7c14de1381

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboJJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks