General

  • Target

    e89db48ba001e183ed2ba324c45958eaea99180805f3e030cf948c008919559d

  • Size

    51KB

  • Sample

    240623-2p62cawcmh

  • MD5

    a81d6800bd93926d39c42eee22b82f97

  • SHA1

    b8d74aff7f07e2b3ddefc988930327a15c5f5f3d

  • SHA256

    e89db48ba001e183ed2ba324c45958eaea99180805f3e030cf948c008919559d

  • SHA512

    bfc776db86896ad0d6e1d38294200d7db4d4477e9e098d0378adfb0cb4dfd64e8d37fb2bff6eb50c08a649439796d57c64c5d090a2c00b35b05ed321716e552e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fboUJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      e89db48ba001e183ed2ba324c45958eaea99180805f3e030cf948c008919559d

    • Size

      51KB

    • MD5

      a81d6800bd93926d39c42eee22b82f97

    • SHA1

      b8d74aff7f07e2b3ddefc988930327a15c5f5f3d

    • SHA256

      e89db48ba001e183ed2ba324c45958eaea99180805f3e030cf948c008919559d

    • SHA512

      bfc776db86896ad0d6e1d38294200d7db4d4477e9e098d0378adfb0cb4dfd64e8d37fb2bff6eb50c08a649439796d57c64c5d090a2c00b35b05ed321716e552e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fboUJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks