General

  • Target

    6f9b6718da6e2ca1e5323c8859f8fddfcef82d3b1b1b067e741fba4aa92021ee

  • Size

    51KB

  • Sample

    240611-kjrk2a1fkm

  • MD5

    14acb22a0f5ecbe173e9882ae1b369d1

  • SHA1

    e468c5119b520596a3bcb9dd9cae7db6a5c6ef5f

  • SHA256

    6f9b6718da6e2ca1e5323c8859f8fddfcef82d3b1b1b067e741fba4aa92021ee

  • SHA512

    2f778d29522b58184ec80090c83f9027935d50c2419de1c1192b45b76abc925f0bd255c9e07a0b4bc41f75e7d7642106f856599b6d8da8b7e78797f90ccee36f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fbo2JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6f9b6718da6e2ca1e5323c8859f8fddfcef82d3b1b1b067e741fba4aa92021ee

    • Size

      51KB

    • MD5

      14acb22a0f5ecbe173e9882ae1b369d1

    • SHA1

      e468c5119b520596a3bcb9dd9cae7db6a5c6ef5f

    • SHA256

      6f9b6718da6e2ca1e5323c8859f8fddfcef82d3b1b1b067e741fba4aa92021ee

    • SHA512

      2f778d29522b58184ec80090c83f9027935d50c2419de1c1192b45b76abc925f0bd255c9e07a0b4bc41f75e7d7642106f856599b6d8da8b7e78797f90ccee36f

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fbo2JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks