General

  • Target

    a0fa5abee82fc4aa4cfd7df2a6e24ac067a477488e946f142f3a062bc35b056b

  • Size

    51KB

  • Sample

    240613-xeerwsxhjc

  • MD5

    063650ca3fa438f5166efaf4911b880f

  • SHA1

    ce74033425885ee27f3b5d6e2638ddd8c1cc004d

  • SHA256

    a0fa5abee82fc4aa4cfd7df2a6e24ac067a477488e946f142f3a062bc35b056b

  • SHA512

    c6e9daea8769fb310afaaf9f09e9e9e31c5eb9db88b476f42a0afd4e5fb86ef085ad3172f69f2a729c2839cbae39526f60456db5adf35bd1c4983600f1a64f18

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLTJYH5:1dWubF3n9S91BF3fboHJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      a0fa5abee82fc4aa4cfd7df2a6e24ac067a477488e946f142f3a062bc35b056b

    • Size

      51KB

    • MD5

      063650ca3fa438f5166efaf4911b880f

    • SHA1

      ce74033425885ee27f3b5d6e2638ddd8c1cc004d

    • SHA256

      a0fa5abee82fc4aa4cfd7df2a6e24ac067a477488e946f142f3a062bc35b056b

    • SHA512

      c6e9daea8769fb310afaaf9f09e9e9e31c5eb9db88b476f42a0afd4e5fb86ef085ad3172f69f2a729c2839cbae39526f60456db5adf35bd1c4983600f1a64f18

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLTJYH5:1dWubF3n9S91BF3fboHJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks