General

  • Target

    da1289ac4e2582e29993e50089a483aa909bbc6d47f2ee46b903163274edd0c3

  • Size

    51KB

  • Sample

    240612-cyv8rsygkc

  • MD5

    88e5dca27ac463060c49767d25b058d1

  • SHA1

    560eee10c0ce0e558d280d399a5b63157cadf2e4

  • SHA256

    da1289ac4e2582e29993e50089a483aa909bbc6d47f2ee46b903163274edd0c3

  • SHA512

    72a352d2397b6c935d6e74307f56b485febe363bf01cf37e9334821f7abf0c8cdc8c176278e41c6630683b526b54b4bafed2edd6e83135e9abcaf900450ba1ca

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      da1289ac4e2582e29993e50089a483aa909bbc6d47f2ee46b903163274edd0c3

    • Size

      51KB

    • MD5

      88e5dca27ac463060c49767d25b058d1

    • SHA1

      560eee10c0ce0e558d280d399a5b63157cadf2e4

    • SHA256

      da1289ac4e2582e29993e50089a483aa909bbc6d47f2ee46b903163274edd0c3

    • SHA512

      72a352d2397b6c935d6e74307f56b485febe363bf01cf37e9334821f7abf0c8cdc8c176278e41c6630683b526b54b4bafed2edd6e83135e9abcaf900450ba1ca

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks