General

  • Target

    45f93e99a8bde7beaceb65dfefe94f91a96120cc8b803e97c6c6b00baf645777

  • Size

    51KB

  • Sample

    241110-aearlsxqfq

  • MD5

    88ca88c7d6e67ccf435684901e4fec22

  • SHA1

    252fd07406f3d7500d898a7ab143ef113bb6bc5e

  • SHA256

    45f93e99a8bde7beaceb65dfefe94f91a96120cc8b803e97c6c6b00baf645777

  • SHA512

    0df0f2ac1f6a31d42de90b56269873ff1b7da9efb0a3ae2b1e2deea2aae65c954b60bf51cb67df312f8468fc53df8891d294e0681192151c10e6c61537f483ef

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboKJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      45f93e99a8bde7beaceb65dfefe94f91a96120cc8b803e97c6c6b00baf645777

    • Size

      51KB

    • MD5

      88ca88c7d6e67ccf435684901e4fec22

    • SHA1

      252fd07406f3d7500d898a7ab143ef113bb6bc5e

    • SHA256

      45f93e99a8bde7beaceb65dfefe94f91a96120cc8b803e97c6c6b00baf645777

    • SHA512

      0df0f2ac1f6a31d42de90b56269873ff1b7da9efb0a3ae2b1e2deea2aae65c954b60bf51cb67df312f8468fc53df8891d294e0681192151c10e6c61537f483ef

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboKJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks