General

  • Target

    d453670cc7dbcfeeda55557fe6955be30b559c493dc58bee9d5b5fa487ee102b

  • Size

    51KB

  • Sample

    240719-ee5zza1fnj

  • MD5

    00739802ff3e4d74cae4398b54d7d8f1

  • SHA1

    1c1fc599e075adb1ed47ec7e889139ca5ea1fa77

  • SHA256

    d453670cc7dbcfeeda55557fe6955be30b559c493dc58bee9d5b5fa487ee102b

  • SHA512

    57db5ee6228670e01d361e3b975007c9de44339598e68a8cd0ba791a2fed0eeabc8ef6823174ebf3e6a376709db919016f96f31a04bad99b856c15bc4f6ee70f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fboTJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      d453670cc7dbcfeeda55557fe6955be30b559c493dc58bee9d5b5fa487ee102b

    • Size

      51KB

    • MD5

      00739802ff3e4d74cae4398b54d7d8f1

    • SHA1

      1c1fc599e075adb1ed47ec7e889139ca5ea1fa77

    • SHA256

      d453670cc7dbcfeeda55557fe6955be30b559c493dc58bee9d5b5fa487ee102b

    • SHA512

      57db5ee6228670e01d361e3b975007c9de44339598e68a8cd0ba791a2fed0eeabc8ef6823174ebf3e6a376709db919016f96f31a04bad99b856c15bc4f6ee70f

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fboTJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks