General

  • Target

    691b1c0149b39f8ed45d126e0af9734a0a47a3610461b2b71c9c876c9bb7d861

  • Size

    51KB

  • Sample

    240911-ebznsa1bnn

  • MD5

    2068c96d28c86f4fa42d44c70c1297ce

  • SHA1

    2819250aaaa77dfef8a7b7ebe7bd1fad38c1e86e

  • SHA256

    691b1c0149b39f8ed45d126e0af9734a0a47a3610461b2b71c9c876c9bb7d861

  • SHA512

    23c27e7a79c84a52c821cda99c44085cacc009d3ffc837fa8e6b100a7c47675c06a4100a7f607e4689b69512e6001ad1302ad782a158b53a82e6bc6e8bb7dc05

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbofJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      691b1c0149b39f8ed45d126e0af9734a0a47a3610461b2b71c9c876c9bb7d861

    • Size

      51KB

    • MD5

      2068c96d28c86f4fa42d44c70c1297ce

    • SHA1

      2819250aaaa77dfef8a7b7ebe7bd1fad38c1e86e

    • SHA256

      691b1c0149b39f8ed45d126e0af9734a0a47a3610461b2b71c9c876c9bb7d861

    • SHA512

      23c27e7a79c84a52c821cda99c44085cacc009d3ffc837fa8e6b100a7c47675c06a4100a7f607e4689b69512e6001ad1302ad782a158b53a82e6bc6e8bb7dc05

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fbofJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks