General

  • Target

    0a057e709157aa998cec5ea7dd2b05dcf48d6d3743bc9b45466073675a0e36ba

  • Size

    51KB

  • Sample

    240619-2f8tksvdje

  • MD5

    ba497b7dd618c83f7e0340f2e41e4f94

  • SHA1

    db6cf85f445d176a722fcf2f36be7fd0e28a44e7

  • SHA256

    0a057e709157aa998cec5ea7dd2b05dcf48d6d3743bc9b45466073675a0e36ba

  • SHA512

    fa3b3c3bb2f96edff081d4e0785dfc226f5e9464e5c6778abe1d1e014e332dc79e940f12cd93fc4b0cb07a598cbccded682cfc13696b263ed8ddcf6dcfe2a808

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLaJYH5:1dWubF3n9S91BF3fbouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0a057e709157aa998cec5ea7dd2b05dcf48d6d3743bc9b45466073675a0e36ba

    • Size

      51KB

    • MD5

      ba497b7dd618c83f7e0340f2e41e4f94

    • SHA1

      db6cf85f445d176a722fcf2f36be7fd0e28a44e7

    • SHA256

      0a057e709157aa998cec5ea7dd2b05dcf48d6d3743bc9b45466073675a0e36ba

    • SHA512

      fa3b3c3bb2f96edff081d4e0785dfc226f5e9464e5c6778abe1d1e014e332dc79e940f12cd93fc4b0cb07a598cbccded682cfc13696b263ed8ddcf6dcfe2a808

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLaJYH5:1dWubF3n9S91BF3fbouJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks