General

  • Target

    33ceb0d1baa44ea959f3c4bba5dd8ecdc3bd68bfd20856651fe0cdd2b4372da4

  • Size

    51KB

  • Sample

    241110-anrfqavjgv

  • MD5

    0ccd8af56e028b9621f2b2b773a43668

  • SHA1

    1316554e9b36a002c8baf2a92c4b1fbbc1ceecdd

  • SHA256

    33ceb0d1baa44ea959f3c4bba5dd8ecdc3bd68bfd20856651fe0cdd2b4372da4

  • SHA512

    7658e86d0c9d33b553c6db3ea1a8412564222f1eced0499bda98e7e2d2b5cbc369c8f84a6569e586d188d02684ae3617d0ed8f20aff48274603931e97b2268f4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fbooJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      33ceb0d1baa44ea959f3c4bba5dd8ecdc3bd68bfd20856651fe0cdd2b4372da4

    • Size

      51KB

    • MD5

      0ccd8af56e028b9621f2b2b773a43668

    • SHA1

      1316554e9b36a002c8baf2a92c4b1fbbc1ceecdd

    • SHA256

      33ceb0d1baa44ea959f3c4bba5dd8ecdc3bd68bfd20856651fe0cdd2b4372da4

    • SHA512

      7658e86d0c9d33b553c6db3ea1a8412564222f1eced0499bda98e7e2d2b5cbc369c8f84a6569e586d188d02684ae3617d0ed8f20aff48274603931e97b2268f4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fbooJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks