General

  • Target

    4aa3433cf082151488d743d351fdedd4e44ea4ab09c2ca0916c1450950f323ca

  • Size

    51KB

  • Sample

    240612-atbmfswgqb

  • MD5

    36521d4a9df737263c591e21e482244b

  • SHA1

    2fc5a3a8489256aad753d778d087e62eca63a503

  • SHA256

    4aa3433cf082151488d743d351fdedd4e44ea4ab09c2ca0916c1450950f323ca

  • SHA512

    b52fcd1b90d0329a893416a9a58e95905a1316ac0eb0738473e72294c567c1b732d116474a43b8271e66bb5f2d2802e4e8d18540eff9a69a32ef86c241105513

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLmJYH5:1dWubF3n9S91BF3fbo6JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4aa3433cf082151488d743d351fdedd4e44ea4ab09c2ca0916c1450950f323ca

    • Size

      51KB

    • MD5

      36521d4a9df737263c591e21e482244b

    • SHA1

      2fc5a3a8489256aad753d778d087e62eca63a503

    • SHA256

      4aa3433cf082151488d743d351fdedd4e44ea4ab09c2ca0916c1450950f323ca

    • SHA512

      b52fcd1b90d0329a893416a9a58e95905a1316ac0eb0738473e72294c567c1b732d116474a43b8271e66bb5f2d2802e4e8d18540eff9a69a32ef86c241105513

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLmJYH5:1dWubF3n9S91BF3fbo6JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks