General

  • Target

    936b55aa28d9de674b033a2c334ebafd5d1855f72adb596e5cc054f54d095d09

  • Size

    51KB

  • Sample

    240627-w1dlaatenb

  • MD5

    d78980b30173cf928ea615fd0c6900cd

  • SHA1

    467933c64db8d0b3c5ed5d08274947dfc3b7d802

  • SHA256

    936b55aa28d9de674b033a2c334ebafd5d1855f72adb596e5cc054f54d095d09

  • SHA512

    606d9b6f40463d1eacec64a622bdd1bc8e17cec2870fb875ddaa9e87496839febd0f2d53c98fac07bb17d3a27e7824d32101ae6dc989061c18bac9dc41f54481

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      936b55aa28d9de674b033a2c334ebafd5d1855f72adb596e5cc054f54d095d09

    • Size

      51KB

    • MD5

      d78980b30173cf928ea615fd0c6900cd

    • SHA1

      467933c64db8d0b3c5ed5d08274947dfc3b7d802

    • SHA256

      936b55aa28d9de674b033a2c334ebafd5d1855f72adb596e5cc054f54d095d09

    • SHA512

      606d9b6f40463d1eacec64a622bdd1bc8e17cec2870fb875ddaa9e87496839febd0f2d53c98fac07bb17d3a27e7824d32101ae6dc989061c18bac9dc41f54481

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLqJYH5:1dWubF3n9S91BF3fbouJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks