General

  • Target

    ad3dd7b51fceb0ff04d2bdbf1900c0c6523af25a4bea2263af7e516f7d6cf495

  • Size

    51KB

  • Sample

    240719-jnrk6azdln

  • MD5

    d1e4316e95f7c3f9baae83ffcadc61f9

  • SHA1

    c951491c200a0ab078279d1fa2613c91a8ea7192

  • SHA256

    ad3dd7b51fceb0ff04d2bdbf1900c0c6523af25a4bea2263af7e516f7d6cf495

  • SHA512

    2081013e7fd754b86c031a8f48741242de16598680746544421eb92c6d505f23afcb6c56d6f875194b39f06a363e2b171819216cb1d25c562c350f387bc467a8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fboPJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ad3dd7b51fceb0ff04d2bdbf1900c0c6523af25a4bea2263af7e516f7d6cf495

    • Size

      51KB

    • MD5

      d1e4316e95f7c3f9baae83ffcadc61f9

    • SHA1

      c951491c200a0ab078279d1fa2613c91a8ea7192

    • SHA256

      ad3dd7b51fceb0ff04d2bdbf1900c0c6523af25a4bea2263af7e516f7d6cf495

    • SHA512

      2081013e7fd754b86c031a8f48741242de16598680746544421eb92c6d505f23afcb6c56d6f875194b39f06a363e2b171819216cb1d25c562c350f387bc467a8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fboPJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks