General

  • Target

    867ec025bd89f91801564924ce3ffae6a90fef7eddef733fda7b3f2c9b89ac2c

  • Size

    51KB

  • Sample

    240611-qrhkzsyfnn

  • MD5

    64222685c01b8a4647efe8053387c049

  • SHA1

    d60e6c36a9b969d1915a65887c5a9d7044984873

  • SHA256

    867ec025bd89f91801564924ce3ffae6a90fef7eddef733fda7b3f2c9b89ac2c

  • SHA512

    6b832a83d7e725397f7ca7bf0680ed69ba1397899646f3d4095b3410c12021bd517916161232beceedbccec2ac77bb8e08eb09186cbdd3051c443e39ec014c14

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      867ec025bd89f91801564924ce3ffae6a90fef7eddef733fda7b3f2c9b89ac2c

    • Size

      51KB

    • MD5

      64222685c01b8a4647efe8053387c049

    • SHA1

      d60e6c36a9b969d1915a65887c5a9d7044984873

    • SHA256

      867ec025bd89f91801564924ce3ffae6a90fef7eddef733fda7b3f2c9b89ac2c

    • SHA512

      6b832a83d7e725397f7ca7bf0680ed69ba1397899646f3d4095b3410c12021bd517916161232beceedbccec2ac77bb8e08eb09186cbdd3051c443e39ec014c14

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fboQJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks