General

  • Target

    faef5cea3dd501cce844f794cf16ac4ca1dbeb7313bf5976f16262ea8d8ac005

  • Size

    51KB

  • Sample

    241013-ds446a1bjn

  • MD5

    a2db6d620414825cebde59ccd0d610c0

  • SHA1

    ae0b7da42b8bdf39ae1f390d6a6b3119fd135207

  • SHA256

    faef5cea3dd501cce844f794cf16ac4ca1dbeb7313bf5976f16262ea8d8ac005

  • SHA512

    dd57b4f1fa1f95b430c547efa5f2c5cb49631069ebf69022c5a62e86ef28cbcdfa67cef2a855f64300dc4ceb610006077a66c5adb4c7df8118b1af3aeb364222

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      faef5cea3dd501cce844f794cf16ac4ca1dbeb7313bf5976f16262ea8d8ac005

    • Size

      51KB

    • MD5

      a2db6d620414825cebde59ccd0d610c0

    • SHA1

      ae0b7da42b8bdf39ae1f390d6a6b3119fd135207

    • SHA256

      faef5cea3dd501cce844f794cf16ac4ca1dbeb7313bf5976f16262ea8d8ac005

    • SHA512

      dd57b4f1fa1f95b430c547efa5f2c5cb49631069ebf69022c5a62e86ef28cbcdfa67cef2a855f64300dc4ceb610006077a66c5adb4c7df8118b1af3aeb364222

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks