General

  • Target

    f0bbc2ef5dc9174a181d948bac76811fd4e658171a765c27a7af5942dd076f52

  • Size

    51KB

  • Sample

    241110-hl9taa1mgy

  • MD5

    10ae536e2740a3e022e40b223a20f7eb

  • SHA1

    6b15cd32b589e0e48050823244307d8084cd9de8

  • SHA256

    f0bbc2ef5dc9174a181d948bac76811fd4e658171a765c27a7af5942dd076f52

  • SHA512

    ab0b5227f1e3ceeee312557d8cfc9454c65af230172912deb982f999192a3e0580c7b6fb56e634f29afb9aec6d6ceb423ad016d5cf5c99c8cfbdec475719930c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fboPJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      f0bbc2ef5dc9174a181d948bac76811fd4e658171a765c27a7af5942dd076f52

    • Size

      51KB

    • MD5

      10ae536e2740a3e022e40b223a20f7eb

    • SHA1

      6b15cd32b589e0e48050823244307d8084cd9de8

    • SHA256

      f0bbc2ef5dc9174a181d948bac76811fd4e658171a765c27a7af5942dd076f52

    • SHA512

      ab0b5227f1e3ceeee312557d8cfc9454c65af230172912deb982f999192a3e0580c7b6fb56e634f29afb9aec6d6ceb423ad016d5cf5c99c8cfbdec475719930c

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLDJYH5:1dWubF3n9S91BF3fboPJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks