General

  • Target

    63b9ebb8604d35a05cf7bd97015d753a7150ff20d4f63562c1e47e3ec0fc7fa6

  • Size

    51KB

  • Sample

    240612-avvfyswhjg

  • MD5

    2218dc02f780499490a9da88d2e5ddf6

  • SHA1

    1b6ca4217e9d867403e8cc8a4d86c5c1b06aa5b0

  • SHA256

    63b9ebb8604d35a05cf7bd97015d753a7150ff20d4f63562c1e47e3ec0fc7fa6

  • SHA512

    098f491ab08256ad55ec59e29706b728802f192b8e78ee0f02c15b4766bd99b76663c4c6495681599b201c9a2c23b88d920ec8e29f6e96243151cfd768010554

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLdJYH5:1dWubF3n9S91BF3fboRJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      63b9ebb8604d35a05cf7bd97015d753a7150ff20d4f63562c1e47e3ec0fc7fa6

    • Size

      51KB

    • MD5

      2218dc02f780499490a9da88d2e5ddf6

    • SHA1

      1b6ca4217e9d867403e8cc8a4d86c5c1b06aa5b0

    • SHA256

      63b9ebb8604d35a05cf7bd97015d753a7150ff20d4f63562c1e47e3ec0fc7fa6

    • SHA512

      098f491ab08256ad55ec59e29706b728802f192b8e78ee0f02c15b4766bd99b76663c4c6495681599b201c9a2c23b88d920ec8e29f6e96243151cfd768010554

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLdJYH5:1dWubF3n9S91BF3fboRJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks