General

  • Target

    fd80f17c74e1469c41db226126f33c1fba9d553f4aa968e0aa659b3ae363a967

  • Size

    51KB

  • Sample

    240611-nlvbgswapq

  • MD5

    8da00a182100a10fa9f61b197fb13148

  • SHA1

    30dc5c875a535e6005afdc28cea0e2250ffc0888

  • SHA256

    fd80f17c74e1469c41db226126f33c1fba9d553f4aa968e0aa659b3ae363a967

  • SHA512

    0b4639de31b8c8a85e0762478a2a5b1dab3252ff9035eb29b031af36eb681f53efdffc8758fce990536be77e2cce31a76c1fcf57b1edf33fcf8dbdce65cc8cb8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fboUJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      fd80f17c74e1469c41db226126f33c1fba9d553f4aa968e0aa659b3ae363a967

    • Size

      51KB

    • MD5

      8da00a182100a10fa9f61b197fb13148

    • SHA1

      30dc5c875a535e6005afdc28cea0e2250ffc0888

    • SHA256

      fd80f17c74e1469c41db226126f33c1fba9d553f4aa968e0aa659b3ae363a967

    • SHA512

      0b4639de31b8c8a85e0762478a2a5b1dab3252ff9035eb29b031af36eb681f53efdffc8758fce990536be77e2cce31a76c1fcf57b1edf33fcf8dbdce65cc8cb8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fboUJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks