General

  • Target

    e21ba34badeaa718c3b4170626d13c0488c9560e3cbc7d0551593af7a383157e

  • Size

    51KB

  • Sample

    240611-kf4q7a1ejl

  • MD5

    b0afdcce4a8bf05cb8e72c411f082cb9

  • SHA1

    026aa2ba3623a03833d47138c223dbab9c09585a

  • SHA256

    e21ba34badeaa718c3b4170626d13c0488c9560e3cbc7d0551593af7a383157e

  • SHA512

    d5a2c9bb345366f17c8fdf7c4f3a83c849a31f4b7c0437349649c79fcdb59ade81e0f90424767dd9df44e4cc3906ece2c77633663735e266f2448abfa053f813

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fboOJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e21ba34badeaa718c3b4170626d13c0488c9560e3cbc7d0551593af7a383157e

    • Size

      51KB

    • MD5

      b0afdcce4a8bf05cb8e72c411f082cb9

    • SHA1

      026aa2ba3623a03833d47138c223dbab9c09585a

    • SHA256

      e21ba34badeaa718c3b4170626d13c0488c9560e3cbc7d0551593af7a383157e

    • SHA512

      d5a2c9bb345366f17c8fdf7c4f3a83c849a31f4b7c0437349649c79fcdb59ade81e0f90424767dd9df44e4cc3906ece2c77633663735e266f2448abfa053f813

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fboOJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks