General

  • Target

    71d35711c3936d547ec6f4fe08b72094c77254db73978dddbf2d773f168ea7b0

  • Size

    51KB

  • Sample

    240825-rjt5gszenl

  • MD5

    9a4e8c9aef22cc59f88d27007154f7b2

  • SHA1

    021b2eb6e1e9d4a385c63937ba6e1041478b7f9a

  • SHA256

    71d35711c3936d547ec6f4fe08b72094c77254db73978dddbf2d773f168ea7b0

  • SHA512

    6be98750c726d164ed177b0e8a534ddc4d650bf63ac7d0083f72c022e57861fc6ce224499485938502c67817983b8ab447151c3310bad496b5f5abd60e497df7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbo9JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      71d35711c3936d547ec6f4fe08b72094c77254db73978dddbf2d773f168ea7b0

    • Size

      51KB

    • MD5

      9a4e8c9aef22cc59f88d27007154f7b2

    • SHA1

      021b2eb6e1e9d4a385c63937ba6e1041478b7f9a

    • SHA256

      71d35711c3936d547ec6f4fe08b72094c77254db73978dddbf2d773f168ea7b0

    • SHA512

      6be98750c726d164ed177b0e8a534ddc4d650bf63ac7d0083f72c022e57861fc6ce224499485938502c67817983b8ab447151c3310bad496b5f5abd60e497df7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fbo9JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks