General

  • Target

    c3cb8a135939c85dc9b509e9f0a73c330571c7ab6b8533e4307fc38d2831c44f

  • Size

    51KB

  • Sample

    240704-eqkheatejm

  • MD5

    3c514887bfabc08b9210eb18b0aca090

  • SHA1

    fa62ff2def34b578582b8eb82ee9d11b0e7b2263

  • SHA256

    c3cb8a135939c85dc9b509e9f0a73c330571c7ab6b8533e4307fc38d2831c44f

  • SHA512

    15fd1c2b170a562f15a79ac0a25ffe5b396aff3a18c99a58cad3d26e4b24fa2bf5f55b3f5168b4f469d0ed28888a626389e924a53bbde82bf58e912d960ffa7f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fbo0JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      c3cb8a135939c85dc9b509e9f0a73c330571c7ab6b8533e4307fc38d2831c44f

    • Size

      51KB

    • MD5

      3c514887bfabc08b9210eb18b0aca090

    • SHA1

      fa62ff2def34b578582b8eb82ee9d11b0e7b2263

    • SHA256

      c3cb8a135939c85dc9b509e9f0a73c330571c7ab6b8533e4307fc38d2831c44f

    • SHA512

      15fd1c2b170a562f15a79ac0a25ffe5b396aff3a18c99a58cad3d26e4b24fa2bf5f55b3f5168b4f469d0ed28888a626389e924a53bbde82bf58e912d960ffa7f

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fbo0JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks