General

  • Target

    65ed73b091095d24584f5ca9f2f83980N.exe

  • Size

    51KB

  • Sample

    240721-e25mqathqf

  • MD5

    65ed73b091095d24584f5ca9f2f83980

  • SHA1

    8f749ed0d847d30f542535945772a13934b1d71f

  • SHA256

    12d9faf63ae632312b946c74d546c736fed2aaad6528ce45f3270214e1f0e465

  • SHA512

    463e4c7a9990302b9e370587d15b92bf4816b45821458e5d304673771578a5d17d804347613735c14b3e80f2b728540709a7cfcb3d97671881800b94f02b0a6a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL6JYH5:1dWubF3n9S91BF3fbomJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      65ed73b091095d24584f5ca9f2f83980N.exe

    • Size

      51KB

    • MD5

      65ed73b091095d24584f5ca9f2f83980

    • SHA1

      8f749ed0d847d30f542535945772a13934b1d71f

    • SHA256

      12d9faf63ae632312b946c74d546c736fed2aaad6528ce45f3270214e1f0e465

    • SHA512

      463e4c7a9990302b9e370587d15b92bf4816b45821458e5d304673771578a5d17d804347613735c14b3e80f2b728540709a7cfcb3d97671881800b94f02b0a6a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL6JYH5:1dWubF3n9S91BF3fbomJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks