General

  • Target

    c9296aafab109e27c19ddc413eab462f4b2fb52ff37d0839a2b3acd508757c5e

  • Size

    51KB

  • Sample

    240627-w6qsssthlc

  • MD5

    d6a30607c673e1132683a2859dc64c30

  • SHA1

    c45602db8b4257fb7d2ef7b6cc8fee85f5402365

  • SHA256

    c9296aafab109e27c19ddc413eab462f4b2fb52ff37d0839a2b3acd508757c5e

  • SHA512

    a3ee972de0aef14a5b0ec1f4809544548773eec269d1555dab6ac85d8e49fd219424825b84870de7aba7b8137b053dd8993cfdda74c074455705d95d147559bc

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fbo6JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      c9296aafab109e27c19ddc413eab462f4b2fb52ff37d0839a2b3acd508757c5e

    • Size

      51KB

    • MD5

      d6a30607c673e1132683a2859dc64c30

    • SHA1

      c45602db8b4257fb7d2ef7b6cc8fee85f5402365

    • SHA256

      c9296aafab109e27c19ddc413eab462f4b2fb52ff37d0839a2b3acd508757c5e

    • SHA512

      a3ee972de0aef14a5b0ec1f4809544548773eec269d1555dab6ac85d8e49fd219424825b84870de7aba7b8137b053dd8993cfdda74c074455705d95d147559bc

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fbo6JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks