General

  • Target

    07bddf673f6e82b31167f0dbc5a282680f2e9505f309eef09ae36a67dcb1a14f

  • Size

    51KB

  • Sample

    240908-e2qhssybje

  • MD5

    a2cbb1633d7c7346d39cc0abee7a63ba

  • SHA1

    9fc92af8673f494e1afa261d4aae73be75ac713a

  • SHA256

    07bddf673f6e82b31167f0dbc5a282680f2e9505f309eef09ae36a67dcb1a14f

  • SHA512

    8d800a8605af7bdca397bdb6e761fe57b45794aaece1d2991c9c4539940cc763fffcda3e60f02f76cc368a457abc5cc7bbe00780ea10a51a5d634f4a6dc47c5e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fbouJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      07bddf673f6e82b31167f0dbc5a282680f2e9505f309eef09ae36a67dcb1a14f

    • Size

      51KB

    • MD5

      a2cbb1633d7c7346d39cc0abee7a63ba

    • SHA1

      9fc92af8673f494e1afa261d4aae73be75ac713a

    • SHA256

      07bddf673f6e82b31167f0dbc5a282680f2e9505f309eef09ae36a67dcb1a14f

    • SHA512

      8d800a8605af7bdca397bdb6e761fe57b45794aaece1d2991c9c4539940cc763fffcda3e60f02f76cc368a457abc5cc7bbe00780ea10a51a5d634f4a6dc47c5e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fbouJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks