General

  • Target

    97b3be42bbf6edfe1cc694e2f68752b499e78502feb0ce64d2a6d6024448c25d

  • Size

    51KB

  • Sample

    240613-yde7psyejg

  • MD5

    f9706625153344012b9d12ff7b71b348

  • SHA1

    2a7d5aa9f31fd1fd541ade8f34d48035fc965ce6

  • SHA256

    97b3be42bbf6edfe1cc694e2f68752b499e78502feb0ce64d2a6d6024448c25d

  • SHA512

    09a55cd08a6f509b60f268d309c9ae8b519384ef56ff4ce02b0e0b0f13324335fe5a001651fdbba5ccf2eb990329d9d0076a720e773a9d9d3f6465067b36c377

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      97b3be42bbf6edfe1cc694e2f68752b499e78502feb0ce64d2a6d6024448c25d

    • Size

      51KB

    • MD5

      f9706625153344012b9d12ff7b71b348

    • SHA1

      2a7d5aa9f31fd1fd541ade8f34d48035fc965ce6

    • SHA256

      97b3be42bbf6edfe1cc694e2f68752b499e78502feb0ce64d2a6d6024448c25d

    • SHA512

      09a55cd08a6f509b60f268d309c9ae8b519384ef56ff4ce02b0e0b0f13324335fe5a001651fdbba5ccf2eb990329d9d0076a720e773a9d9d3f6465067b36c377

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks