General

  • Target

    4cb4ce33d0bf2bf361f2b78368247d00d43eabf5d48084f21b33d8541ba7e123

  • Size

    51KB

  • Sample

    240926-ayhxbszdlh

  • MD5

    2ac16d4dbb75d2396786b78cefb2e639

  • SHA1

    1bda9d57ab70f83073a8aced204e906b729b2b5f

  • SHA256

    4cb4ce33d0bf2bf361f2b78368247d00d43eabf5d48084f21b33d8541ba7e123

  • SHA512

    0e5cccebbed240044c0b1af4e63f5e6ab88cf4fd8014004db0e3e6bda1d36920dd68416be41ce6131df903823bd565e6c4ffcd920f22792849ee13370df07525

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fboUJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4cb4ce33d0bf2bf361f2b78368247d00d43eabf5d48084f21b33d8541ba7e123

    • Size

      51KB

    • MD5

      2ac16d4dbb75d2396786b78cefb2e639

    • SHA1

      1bda9d57ab70f83073a8aced204e906b729b2b5f

    • SHA256

      4cb4ce33d0bf2bf361f2b78368247d00d43eabf5d48084f21b33d8541ba7e123

    • SHA512

      0e5cccebbed240044c0b1af4e63f5e6ab88cf4fd8014004db0e3e6bda1d36920dd68416be41ce6131df903823bd565e6c4ffcd920f22792849ee13370df07525

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLgJYH5:1dWubF3n9S91BF3fboUJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks