General

  • Target

    84dce151bd1a23c6bf83156deca2763fb39198f73a45170ba001db96bfa0dff5

  • Size

    51KB

  • Sample

    240611-mm2arathrq

  • MD5

    942b053927347c8ad9b387b52ab9e9bb

  • SHA1

    a684cfe18fdd48b14bb730d1940fed47630d1ae0

  • SHA256

    84dce151bd1a23c6bf83156deca2763fb39198f73a45170ba001db96bfa0dff5

  • SHA512

    0de74510fd515e18dd01653512e547b5c438964fc274e8151fb6ed16579f731d2dbd901da79c0f5ee1136094a4db21426115409e3bfe650db903261b58b173cb

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboJJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      84dce151bd1a23c6bf83156deca2763fb39198f73a45170ba001db96bfa0dff5

    • Size

      51KB

    • MD5

      942b053927347c8ad9b387b52ab9e9bb

    • SHA1

      a684cfe18fdd48b14bb730d1940fed47630d1ae0

    • SHA256

      84dce151bd1a23c6bf83156deca2763fb39198f73a45170ba001db96bfa0dff5

    • SHA512

      0de74510fd515e18dd01653512e547b5c438964fc274e8151fb6ed16579f731d2dbd901da79c0f5ee1136094a4db21426115409e3bfe650db903261b58b173cb

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboJJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks