General

  • Target

    9014e85a9c59494b80ebd48dc0d4706d548e181e07b20d17013eeec96e10d47a

  • Size

    51KB

  • Sample

    240914-mqwjnszgjc

  • MD5

    7494c651020fedb4363d388a5e1762ce

  • SHA1

    027711341baf08d2b6dd19f5a804e19d5d24eaab

  • SHA256

    9014e85a9c59494b80ebd48dc0d4706d548e181e07b20d17013eeec96e10d47a

  • SHA512

    0c4a37683914b90c2264f6a65d396b51d007d1f160d768540333b613ac57369fa7484016a3dbbb2d6e2add1e083fe87599179502513bec3691a662a9e2c05276

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLrJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      9014e85a9c59494b80ebd48dc0d4706d548e181e07b20d17013eeec96e10d47a

    • Size

      51KB

    • MD5

      7494c651020fedb4363d388a5e1762ce

    • SHA1

      027711341baf08d2b6dd19f5a804e19d5d24eaab

    • SHA256

      9014e85a9c59494b80ebd48dc0d4706d548e181e07b20d17013eeec96e10d47a

    • SHA512

      0c4a37683914b90c2264f6a65d396b51d007d1f160d768540333b613ac57369fa7484016a3dbbb2d6e2add1e083fe87599179502513bec3691a662a9e2c05276

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLrJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks