General

  • Target

    399f9e1ed1371c5b47689462fd0e26f9685e0988a845a0f1d8d6f944df617ace

  • Size

    51KB

  • Sample

    240704-ensq1avhqd

  • MD5

    ffe83c12a3bf66e510c4979ec30ad9f9

  • SHA1

    9778728d7ea0192ac9236cd922c8ee03f387d593

  • SHA256

    399f9e1ed1371c5b47689462fd0e26f9685e0988a845a0f1d8d6f944df617ace

  • SHA512

    eb701cc476ddbc54051a74f97fc0ec17d1cbc221b7f7175996388c60e5bdbc35aa544060633bb3ec7613321fafb69bb913fa030084d4707556a0b4b038d38a9b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLpJYH5:1dWubF3n9S91BF3fbodJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      399f9e1ed1371c5b47689462fd0e26f9685e0988a845a0f1d8d6f944df617ace

    • Size

      51KB

    • MD5

      ffe83c12a3bf66e510c4979ec30ad9f9

    • SHA1

      9778728d7ea0192ac9236cd922c8ee03f387d593

    • SHA256

      399f9e1ed1371c5b47689462fd0e26f9685e0988a845a0f1d8d6f944df617ace

    • SHA512

      eb701cc476ddbc54051a74f97fc0ec17d1cbc221b7f7175996388c60e5bdbc35aa544060633bb3ec7613321fafb69bb913fa030084d4707556a0b4b038d38a9b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLpJYH5:1dWubF3n9S91BF3fbodJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks