General

  • Target

    1931f6700bc57b418f8c2ee3c4575e86dec5c75b69dbe5df0e1631294fd4fe22

  • Size

    51KB

  • Sample

    240701-qq8qsaxfjq

  • MD5

    1b35462b45e75c0783171b4c680e6f0c

  • SHA1

    3db2909696b59872d1095c7b8c8b788422ec5066

  • SHA256

    1931f6700bc57b418f8c2ee3c4575e86dec5c75b69dbe5df0e1631294fd4fe22

  • SHA512

    086a3fd5ac43007624c2e6ab28bab55622889021d93d0cdc212d925418082cd7fea0e7fa524e7ee86090ea1e8870e4071a64a038f922e57174cd736d3fb953ac

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboiJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      1931f6700bc57b418f8c2ee3c4575e86dec5c75b69dbe5df0e1631294fd4fe22

    • Size

      51KB

    • MD5

      1b35462b45e75c0783171b4c680e6f0c

    • SHA1

      3db2909696b59872d1095c7b8c8b788422ec5066

    • SHA256

      1931f6700bc57b418f8c2ee3c4575e86dec5c75b69dbe5df0e1631294fd4fe22

    • SHA512

      086a3fd5ac43007624c2e6ab28bab55622889021d93d0cdc212d925418082cd7fea0e7fa524e7ee86090ea1e8870e4071a64a038f922e57174cd736d3fb953ac

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboiJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks