General

  • Target

    16349ddd14bc1916b5f691e5d663397b3bf258a2718d19dfbd253516943f641f

  • Size

    51KB

  • Sample

    241110-3pv5hsxgrh

  • MD5

    4d87b0c62fbc2602396b8c032278dc4c

  • SHA1

    288a198f6fae186ee6c8b259fd3d589b0bd8659a

  • SHA256

    16349ddd14bc1916b5f691e5d663397b3bf258a2718d19dfbd253516943f641f

  • SHA512

    0deeb8afb4b59fc8ab1d22113eb5203123fd155de3e04e4db2b2009410e2492135da5ddc2a23960f38e7b2ac22f4025eb5715136c896048a62d6e8ef68b130ce

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      16349ddd14bc1916b5f691e5d663397b3bf258a2718d19dfbd253516943f641f

    • Size

      51KB

    • MD5

      4d87b0c62fbc2602396b8c032278dc4c

    • SHA1

      288a198f6fae186ee6c8b259fd3d589b0bd8659a

    • SHA256

      16349ddd14bc1916b5f691e5d663397b3bf258a2718d19dfbd253516943f641f

    • SHA512

      0deeb8afb4b59fc8ab1d22113eb5203123fd155de3e04e4db2b2009410e2492135da5ddc2a23960f38e7b2ac22f4025eb5715136c896048a62d6e8ef68b130ce

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks