General

  • Target

    24643f6f298d6de1ce60a8b48fc1f4c02ce30ff2ed8ac8ebff72691dd53e6e46

  • Size

    51KB

  • Sample

    241110-hhvj7a1mbt

  • MD5

    388db909c02eebf33e802682beb131c2

  • SHA1

    02c4c1f0000e2a6da59330308603a257b984f2a4

  • SHA256

    24643f6f298d6de1ce60a8b48fc1f4c02ce30ff2ed8ac8ebff72691dd53e6e46

  • SHA512

    b2b5aa7efbb7ffe0c3550279785d9714b4f805e14e6d6f5eed6682c91b59857da507a431fca9840c34350ed148c39f5acc68344781fd97fae1401e5555625cae

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      24643f6f298d6de1ce60a8b48fc1f4c02ce30ff2ed8ac8ebff72691dd53e6e46

    • Size

      51KB

    • MD5

      388db909c02eebf33e802682beb131c2

    • SHA1

      02c4c1f0000e2a6da59330308603a257b984f2a4

    • SHA256

      24643f6f298d6de1ce60a8b48fc1f4c02ce30ff2ed8ac8ebff72691dd53e6e46

    • SHA512

      b2b5aa7efbb7ffe0c3550279785d9714b4f805e14e6d6f5eed6682c91b59857da507a431fca9840c34350ed148c39f5acc68344781fd97fae1401e5555625cae

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks