General

  • Target

    45aadc9d41f0864abe4c6f00eb20083f37d8b2830cba573e2cf5cb1b1c2d7b27

  • Size

    51KB

  • Sample

    240611-nlvbgswapr

  • MD5

    ca7ae939133da6f164498771d1ee8ec3

  • SHA1

    cc106e0f782121934e8a4246222d92559b35bcde

  • SHA256

    45aadc9d41f0864abe4c6f00eb20083f37d8b2830cba573e2cf5cb1b1c2d7b27

  • SHA512

    7e0835739a63331262d9e7d57dbadba4bc344acf64fa4de8d921a8dbb499420fda6adf21a3f3813b082ba5b553b831ad6d54af7e71b0df6997e1584c21b1c1fc

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbo2JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      45aadc9d41f0864abe4c6f00eb20083f37d8b2830cba573e2cf5cb1b1c2d7b27

    • Size

      51KB

    • MD5

      ca7ae939133da6f164498771d1ee8ec3

    • SHA1

      cc106e0f782121934e8a4246222d92559b35bcde

    • SHA256

      45aadc9d41f0864abe4c6f00eb20083f37d8b2830cba573e2cf5cb1b1c2d7b27

    • SHA512

      7e0835739a63331262d9e7d57dbadba4bc344acf64fa4de8d921a8dbb499420fda6adf21a3f3813b082ba5b553b831ad6d54af7e71b0df6997e1584c21b1c1fc

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbo2JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks