General

  • Target

    8105138ac607e4a9ac08b4220a1ecc31a46d9c7e6d28655bbbbd63cca8af6af1

  • Size

    51KB

  • Sample

    241014-hv3rbswdmm

  • MD5

    635596db126ee89d439e7e510c69e58b

  • SHA1

    145c7cf1e6be68130ec8ba0d4181d4fd1ef0fea6

  • SHA256

    8105138ac607e4a9ac08b4220a1ecc31a46d9c7e6d28655bbbbd63cca8af6af1

  • SHA512

    8e7dfb676d6bc860b8eed1bc235b8c2888207ae6e6d656f3a114ba16263d7e3f0761c21c39e6dee2fc2ca3fd059d6f42f3ee03371fddb4cfb24d547f631bb731

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fbocJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      8105138ac607e4a9ac08b4220a1ecc31a46d9c7e6d28655bbbbd63cca8af6af1

    • Size

      51KB

    • MD5

      635596db126ee89d439e7e510c69e58b

    • SHA1

      145c7cf1e6be68130ec8ba0d4181d4fd1ef0fea6

    • SHA256

      8105138ac607e4a9ac08b4220a1ecc31a46d9c7e6d28655bbbbd63cca8af6af1

    • SHA512

      8e7dfb676d6bc860b8eed1bc235b8c2888207ae6e6d656f3a114ba16263d7e3f0761c21c39e6dee2fc2ca3fd059d6f42f3ee03371fddb4cfb24d547f631bb731

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fbocJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Enterprise v15

Tasks