General

  • Target

    5f4df73e8baea3f74b808575c23974a01c78e216ad01da3984468cdb3bc4d6b8

  • Size

    51KB

  • Sample

    241110-hhw31svlel

  • MD5

    726dedb0ce4fdba634be600fef33cc62

  • SHA1

    91dc920566fcbe7eda3bb89953f3f54852f5e7a7

  • SHA256

    5f4df73e8baea3f74b808575c23974a01c78e216ad01da3984468cdb3bc4d6b8

  • SHA512

    3f616840b25e836cc49ffb663512e286eddb88e7278b43905913e92406536152e2f924d2f2f6ef7cad1ef521863d399ce651fb81172dafd8276fa02c63417c4a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbo4JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      5f4df73e8baea3f74b808575c23974a01c78e216ad01da3984468cdb3bc4d6b8

    • Size

      51KB

    • MD5

      726dedb0ce4fdba634be600fef33cc62

    • SHA1

      91dc920566fcbe7eda3bb89953f3f54852f5e7a7

    • SHA256

      5f4df73e8baea3f74b808575c23974a01c78e216ad01da3984468cdb3bc4d6b8

    • SHA512

      3f616840b25e836cc49ffb663512e286eddb88e7278b43905913e92406536152e2f924d2f2f6ef7cad1ef521863d399ce651fb81172dafd8276fa02c63417c4a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbo4JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks