General

  • Target

    205a28a5fcd9625d883448556dedb72b94055ea5d54374ed44b5f484b1d7255b

  • Size

    51KB

  • Sample

    240619-2kscdszanp

  • MD5

    5ed1411e522396b9607d573f393afc2a

  • SHA1

    d46cc4369eeb792a03ea44d0bb613dae29bb647f

  • SHA256

    205a28a5fcd9625d883448556dedb72b94055ea5d54374ed44b5f484b1d7255b

  • SHA512

    e6e4c32be1f1ff2c8d1cc7f031f3df54c691517db3fe6a0b08d5af8c860c60c80de39e3a5f5f1fbb6b433e4ce31bd63f7cb19f928bd97df5c12c5ef35b46cce8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      205a28a5fcd9625d883448556dedb72b94055ea5d54374ed44b5f484b1d7255b

    • Size

      51KB

    • MD5

      5ed1411e522396b9607d573f393afc2a

    • SHA1

      d46cc4369eeb792a03ea44d0bb613dae29bb647f

    • SHA256

      205a28a5fcd9625d883448556dedb72b94055ea5d54374ed44b5f484b1d7255b

    • SHA512

      e6e4c32be1f1ff2c8d1cc7f031f3df54c691517db3fe6a0b08d5af8c860c60c80de39e3a5f5f1fbb6b433e4ce31bd63f7cb19f928bd97df5c12c5ef35b46cce8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks