General

  • Target

    40877045cbd10784627907eb4f08d1cbe9b67538b00a31b8e726d623474700b3

  • Size

    51KB

  • Sample

    241110-hn9ajascje

  • MD5

    2c38129a1c88f28d8c1c824e1ec8e594

  • SHA1

    9684f4521fac1151aebc32947a839c0c56a00dc2

  • SHA256

    40877045cbd10784627907eb4f08d1cbe9b67538b00a31b8e726d623474700b3

  • SHA512

    384c64c5a1a0f8a07c7551623d45a8c7d4835e3a6a375a7ba1ed3c40dfc08ed69eae635ec708160db830721066206ba389e2844b3f50c64a150260de191e928d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fbogJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      40877045cbd10784627907eb4f08d1cbe9b67538b00a31b8e726d623474700b3

    • Size

      51KB

    • MD5

      2c38129a1c88f28d8c1c824e1ec8e594

    • SHA1

      9684f4521fac1151aebc32947a839c0c56a00dc2

    • SHA256

      40877045cbd10784627907eb4f08d1cbe9b67538b00a31b8e726d623474700b3

    • SHA512

      384c64c5a1a0f8a07c7551623d45a8c7d4835e3a6a375a7ba1ed3c40dfc08ed69eae635ec708160db830721066206ba389e2844b3f50c64a150260de191e928d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fbogJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks