General

  • Target

    bd1834d04210b18db7032ecd42b3b360N.exe

  • Size

    51KB

  • Sample

    240722-rbx66s1brd

  • MD5

    bd1834d04210b18db7032ecd42b3b360

  • SHA1

    2b639e6fd874579540a92eae9d3a9fd7060b9a29

  • SHA256

    3ec9f634f147ac8aff2f2316e076d456873ad74f706c97648ccaf1fb092f81ba

  • SHA512

    ebb1c020cebdbf736ee02d407ae1fdd6d1d4b5b2548d199f4e2b8e0950d22a96dbad4749d92ec17488c267ad1deec357e79b028f022a96839805fce47315bba3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbo3JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      bd1834d04210b18db7032ecd42b3b360N.exe

    • Size

      51KB

    • MD5

      bd1834d04210b18db7032ecd42b3b360

    • SHA1

      2b639e6fd874579540a92eae9d3a9fd7060b9a29

    • SHA256

      3ec9f634f147ac8aff2f2316e076d456873ad74f706c97648ccaf1fb092f81ba

    • SHA512

      ebb1c020cebdbf736ee02d407ae1fdd6d1d4b5b2548d199f4e2b8e0950d22a96dbad4749d92ec17488c267ad1deec357e79b028f022a96839805fce47315bba3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbo3JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks