General

  • Target

    fd990f0a5d4f9cb6b5e24da18226a68f7378a9b86b0bcae12bfbef6030318879

  • Size

    51KB

  • Sample

    240612-cyvx1aygkl

  • MD5

    393d30d4cdab5a9a81ec3fb177d67bb4

  • SHA1

    1cffda88c787e59c5e335b376cd743d47b8325ef

  • SHA256

    fd990f0a5d4f9cb6b5e24da18226a68f7378a9b86b0bcae12bfbef6030318879

  • SHA512

    c4aba0c8531543a8ba44c8483a954698f14de12ce52e04a3ccb5d14f9764a70dc8875b6bc5d3eb48039ed7684304d9f7785a847055e7a1fffd7817a82b456cfc

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLEJYH5:1dWubF3n9S91BF3fboAJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      fd990f0a5d4f9cb6b5e24da18226a68f7378a9b86b0bcae12bfbef6030318879

    • Size

      51KB

    • MD5

      393d30d4cdab5a9a81ec3fb177d67bb4

    • SHA1

      1cffda88c787e59c5e335b376cd743d47b8325ef

    • SHA256

      fd990f0a5d4f9cb6b5e24da18226a68f7378a9b86b0bcae12bfbef6030318879

    • SHA512

      c4aba0c8531543a8ba44c8483a954698f14de12ce52e04a3ccb5d14f9764a70dc8875b6bc5d3eb48039ed7684304d9f7785a847055e7a1fffd7817a82b456cfc

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLEJYH5:1dWubF3n9S91BF3fboAJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks