General

  • Target

    47603f464234aca36f6859664b4ac555534b6834fe1ec2d0181ca48868d3b8aa

  • Size

    51KB

  • Sample

    240616-wy97gavhqk

  • MD5

    772677d24975559942e1de31f2d3d4c3

  • SHA1

    789a7ccc1bdfaf3150c5c3ecb679797846a13e70

  • SHA256

    47603f464234aca36f6859664b4ac555534b6834fe1ec2d0181ca48868d3b8aa

  • SHA512

    e2b8fbb77f09648d7dd2d77cf18b28652ff2d4a62bd24dde1581aadacd73f202f6becb112b6f9f0c40c8bfc50044e4ff370a70cfde93acb49409114fbf19a46b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLzJYH5:1dWubF3n9S91BF3fboHJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      47603f464234aca36f6859664b4ac555534b6834fe1ec2d0181ca48868d3b8aa

    • Size

      51KB

    • MD5

      772677d24975559942e1de31f2d3d4c3

    • SHA1

      789a7ccc1bdfaf3150c5c3ecb679797846a13e70

    • SHA256

      47603f464234aca36f6859664b4ac555534b6834fe1ec2d0181ca48868d3b8aa

    • SHA512

      e2b8fbb77f09648d7dd2d77cf18b28652ff2d4a62bd24dde1581aadacd73f202f6becb112b6f9f0c40c8bfc50044e4ff370a70cfde93acb49409114fbf19a46b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLzJYH5:1dWubF3n9S91BF3fboHJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks