General

  • Target

    3898d472208d4f433c03de5f074126bd0cfda13d79afd058bf11e0e31b3265f3

  • Size

    51KB

  • Sample

    241110-hht9es1hkl

  • MD5

    c2dccecbadf7ddb6c82a2a889a30e665

  • SHA1

    9818bf7010fd85cfaf876438e7bcd4ee3649dd5c

  • SHA256

    3898d472208d4f433c03de5f074126bd0cfda13d79afd058bf11e0e31b3265f3

  • SHA512

    21bdeded802f0068e1b03079589af103ee6865cd3f1408931b6b1943c067e783b77b6bdcdcb4ada12e1f216001f46e0b614ce65473760e7389f40aaefd3b32af

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3898d472208d4f433c03de5f074126bd0cfda13d79afd058bf11e0e31b3265f3

    • Size

      51KB

    • MD5

      c2dccecbadf7ddb6c82a2a889a30e665

    • SHA1

      9818bf7010fd85cfaf876438e7bcd4ee3649dd5c

    • SHA256

      3898d472208d4f433c03de5f074126bd0cfda13d79afd058bf11e0e31b3265f3

    • SHA512

      21bdeded802f0068e1b03079589af103ee6865cd3f1408931b6b1943c067e783b77b6bdcdcb4ada12e1f216001f46e0b614ce65473760e7389f40aaefd3b32af

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks