General

  • Target

    9a760c324b76ca248007becb8625b63b945a0e405655b35120419f533dd73970

  • Size

    51KB

  • Sample

    240611-nnt4havgje

  • MD5

    9c93abd029c83099f9995994093e2092

  • SHA1

    9d338aa1964de23d2cd91adec6ee05284d13068c

  • SHA256

    9a760c324b76ca248007becb8625b63b945a0e405655b35120419f533dd73970

  • SHA512

    4ad68f0c4756ae8a88aee23ea14f0a09f55bb36a640c2d328a6b08d059ef50ed497e794c886d114e746b412a5b165034f545d7bde325a35de0fc3556d1ecbc4d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9a760c324b76ca248007becb8625b63b945a0e405655b35120419f533dd73970

    • Size

      51KB

    • MD5

      9c93abd029c83099f9995994093e2092

    • SHA1

      9d338aa1964de23d2cd91adec6ee05284d13068c

    • SHA256

      9a760c324b76ca248007becb8625b63b945a0e405655b35120419f533dd73970

    • SHA512

      4ad68f0c4756ae8a88aee23ea14f0a09f55bb36a640c2d328a6b08d059ef50ed497e794c886d114e746b412a5b165034f545d7bde325a35de0fc3556d1ecbc4d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks