General

  • Target

    170c0af0056913445a54bb1b8ee881a5b171bbbfb3a40feb875455f6860b33c9

  • Size

    51KB

  • Sample

    240623-wapwmaxhrd

  • MD5

    33dd19a2d5a42c22975e49a9898beb4f

  • SHA1

    1b2c8d359caf7d18be18c92b3c8d75ac031d91f4

  • SHA256

    170c0af0056913445a54bb1b8ee881a5b171bbbfb3a40feb875455f6860b33c9

  • SHA512

    49ccc6f25315de639af060ed8a68963111a16f72eac09a5b15ddbcffc48c0fe17f642c2f76602278e8b5b214ea3ae2cd877027ac5728101c1d3076a43d670387

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      170c0af0056913445a54bb1b8ee881a5b171bbbfb3a40feb875455f6860b33c9

    • Size

      51KB

    • MD5

      33dd19a2d5a42c22975e49a9898beb4f

    • SHA1

      1b2c8d359caf7d18be18c92b3c8d75ac031d91f4

    • SHA256

      170c0af0056913445a54bb1b8ee881a5b171bbbfb3a40feb875455f6860b33c9

    • SHA512

      49ccc6f25315de639af060ed8a68963111a16f72eac09a5b15ddbcffc48c0fe17f642c2f76602278e8b5b214ea3ae2cd877027ac5728101c1d3076a43d670387

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks