General

  • Target

    46b4750a38385a257704e9757a3e7bffa627e267a9c9217271a1f971eb9ca83b

  • Size

    51KB

  • Sample

    240809-bg7d2atfjp

  • MD5

    05d00baa20c87978e72bb82a7cf9595e

  • SHA1

    589ed30a6d14e3ccd9305184831e2362aff99a07

  • SHA256

    46b4750a38385a257704e9757a3e7bffa627e267a9c9217271a1f971eb9ca83b

  • SHA512

    3652a4cf9e7670d9b6a39d0aff57e02807209c847ad57cac360cbfe6b8ecaf22dea65e418ca36f0a740406002780b37d1beeef78ead79f198aa867703c9feab6

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fboTJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      46b4750a38385a257704e9757a3e7bffa627e267a9c9217271a1f971eb9ca83b

    • Size

      51KB

    • MD5

      05d00baa20c87978e72bb82a7cf9595e

    • SHA1

      589ed30a6d14e3ccd9305184831e2362aff99a07

    • SHA256

      46b4750a38385a257704e9757a3e7bffa627e267a9c9217271a1f971eb9ca83b

    • SHA512

      3652a4cf9e7670d9b6a39d0aff57e02807209c847ad57cac360cbfe6b8ecaf22dea65e418ca36f0a740406002780b37d1beeef78ead79f198aa867703c9feab6

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fboTJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks