General

  • Target

    7af91fd0670d7bceee15b6287b92ec4a6554944be886127029e514c0ea5601d0

  • Size

    51KB

  • Sample

    240628-3dfkpayajk

  • MD5

    98f3581d873ac16750beb754a7038913

  • SHA1

    0a9d40fe5c311cad2793d0726ff2dd4987f0c311

  • SHA256

    7af91fd0670d7bceee15b6287b92ec4a6554944be886127029e514c0ea5601d0

  • SHA512

    fa4838cbb7af4a48b1785cb095a37e8d26f30fe03176c910e82b9487958f2d5126ac68b103f71b3a0a44677d43945afb312cca6bd959100a5d60840c79616cc2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7af91fd0670d7bceee15b6287b92ec4a6554944be886127029e514c0ea5601d0

    • Size

      51KB

    • MD5

      98f3581d873ac16750beb754a7038913

    • SHA1

      0a9d40fe5c311cad2793d0726ff2dd4987f0c311

    • SHA256

      7af91fd0670d7bceee15b6287b92ec4a6554944be886127029e514c0ea5601d0

    • SHA512

      fa4838cbb7af4a48b1785cb095a37e8d26f30fe03176c910e82b9487958f2d5126ac68b103f71b3a0a44677d43945afb312cca6bd959100a5d60840c79616cc2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboQJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks