General

  • Target

    9a62a1a5025395aa0e53ed9433a4f9fb7a3ec6d0297cd65100009593998bdd12

  • Size

    51KB

  • Sample

    240911-xvmgnsxfmj

  • MD5

    1407443fe9b1be9b73503c1bed1d93ea

  • SHA1

    288761eb817291561c4db7a52d7618e897dfe015

  • SHA256

    9a62a1a5025395aa0e53ed9433a4f9fb7a3ec6d0297cd65100009593998bdd12

  • SHA512

    a56b6e14fa8dc513cdf302defdc570ebd4262122da5058e207b49e59649e7d37f7c0710bb1fe32cc6057903e18382ee86c248a550599a1beecb8bb321b7a60fc

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboNJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9a62a1a5025395aa0e53ed9433a4f9fb7a3ec6d0297cd65100009593998bdd12

    • Size

      51KB

    • MD5

      1407443fe9b1be9b73503c1bed1d93ea

    • SHA1

      288761eb817291561c4db7a52d7618e897dfe015

    • SHA256

      9a62a1a5025395aa0e53ed9433a4f9fb7a3ec6d0297cd65100009593998bdd12

    • SHA512

      a56b6e14fa8dc513cdf302defdc570ebd4262122da5058e207b49e59649e7d37f7c0710bb1fe32cc6057903e18382ee86c248a550599a1beecb8bb321b7a60fc

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboNJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks