General

  • Target

    cafa483c5291583acd35d7607620dc5b4bf0fb303f60cceb71ff9ebf6d37dbd0

  • Size

    51KB

  • Sample

    240611-w48ktswgmh

  • MD5

    ac00e2b206155aac07c1da09040c242f

  • SHA1

    36ba5c406b843e4a987d444245596e7bd2bdd93d

  • SHA256

    cafa483c5291583acd35d7607620dc5b4bf0fb303f60cceb71ff9ebf6d37dbd0

  • SHA512

    5d50a75584a2cc7ba954d0f2bbbf661bf5987eb825f526053d07643c88af0fdd5816695246ecaf7eb0f1dda10f85913967c7723597de765e597c46fac53fec7d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLTJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      cafa483c5291583acd35d7607620dc5b4bf0fb303f60cceb71ff9ebf6d37dbd0

    • Size

      51KB

    • MD5

      ac00e2b206155aac07c1da09040c242f

    • SHA1

      36ba5c406b843e4a987d444245596e7bd2bdd93d

    • SHA256

      cafa483c5291583acd35d7607620dc5b4bf0fb303f60cceb71ff9ebf6d37dbd0

    • SHA512

      5d50a75584a2cc7ba954d0f2bbbf661bf5987eb825f526053d07643c88af0fdd5816695246ecaf7eb0f1dda10f85913967c7723597de765e597c46fac53fec7d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLTJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks