General

  • Target

    b13fe6f9cbf885ec50d7914d3092055e40f6d96229b489a90107108f8857d863

  • Size

    51KB

  • Sample

    240624-q1cfbsycmn

  • MD5

    b8ad25fd2dd080f27c6945acf0f549f1

  • SHA1

    73d2f11e3b568d213584370d09d2a5c6f3209850

  • SHA256

    b13fe6f9cbf885ec50d7914d3092055e40f6d96229b489a90107108f8857d863

  • SHA512

    540ef4dd414573c2a1eb6084ef27183722d876f64c2df75769fc162334c4d929e54d927516b642aa0fbc2c7506ba1169cd597cd65b61187ae3ec43ce8d7478c7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b13fe6f9cbf885ec50d7914d3092055e40f6d96229b489a90107108f8857d863

    • Size

      51KB

    • MD5

      b8ad25fd2dd080f27c6945acf0f549f1

    • SHA1

      73d2f11e3b568d213584370d09d2a5c6f3209850

    • SHA256

      b13fe6f9cbf885ec50d7914d3092055e40f6d96229b489a90107108f8857d863

    • SHA512

      540ef4dd414573c2a1eb6084ef27183722d876f64c2df75769fc162334c4d929e54d927516b642aa0fbc2c7506ba1169cd597cd65b61187ae3ec43ce8d7478c7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks