General

  • Target

    248962b5bbc249015649346860a7f87174502dd1eff7357de880f8f82a7836d9

  • Size

    51KB

  • Sample

    241110-hf9w4avlcm

  • MD5

    40e376412294c2fb0c1d390406e02acb

  • SHA1

    41591e6781aee726109737acdb24eb71b2198001

  • SHA256

    248962b5bbc249015649346860a7f87174502dd1eff7357de880f8f82a7836d9

  • SHA512

    e0ef89d44df237c5ae7ab0cad1ea10829bb7ad365344327b65a9a23e4e6aa9fd3deed69c19303c76be9eaaa5eda41bd634b9a2eeb3f898b935349486e2f23d07

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboVJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      248962b5bbc249015649346860a7f87174502dd1eff7357de880f8f82a7836d9

    • Size

      51KB

    • MD5

      40e376412294c2fb0c1d390406e02acb

    • SHA1

      41591e6781aee726109737acdb24eb71b2198001

    • SHA256

      248962b5bbc249015649346860a7f87174502dd1eff7357de880f8f82a7836d9

    • SHA512

      e0ef89d44df237c5ae7ab0cad1ea10829bb7ad365344327b65a9a23e4e6aa9fd3deed69c19303c76be9eaaa5eda41bd634b9a2eeb3f898b935349486e2f23d07

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboVJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks