General

  • Target

    26e2465f762da5dff6712ed555f4ed1ae4cc352454df5fd919a0ae2a572fedfa

  • Size

    51KB

  • Sample

    240611-pn6mzaxdkl

  • MD5

    3e1caea13e0dcb749ec00240208e8b0a

  • SHA1

    b6a96d1e7e041711873b1004db9d5f8dad190953

  • SHA256

    26e2465f762da5dff6712ed555f4ed1ae4cc352454df5fd919a0ae2a572fedfa

  • SHA512

    d5ec212d7f5a867ab8efd298ed1d24e0eb8ab19378e227e0c4ae0a9422be2d9cf27e9c273f8f941309f891f730bc556fe00373141542a860ab08d936a640d1d8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL4JYH5:1dWubF3n9S91BF3fbosJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      26e2465f762da5dff6712ed555f4ed1ae4cc352454df5fd919a0ae2a572fedfa

    • Size

      51KB

    • MD5

      3e1caea13e0dcb749ec00240208e8b0a

    • SHA1

      b6a96d1e7e041711873b1004db9d5f8dad190953

    • SHA256

      26e2465f762da5dff6712ed555f4ed1ae4cc352454df5fd919a0ae2a572fedfa

    • SHA512

      d5ec212d7f5a867ab8efd298ed1d24e0eb8ab19378e227e0c4ae0a9422be2d9cf27e9c273f8f941309f891f730bc556fe00373141542a860ab08d936a640d1d8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL4JYH5:1dWubF3n9S91BF3fbosJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks