General

  • Target

    234a34ce7b1de3195354c04d39b097c911a1c64a22514e322b176eb0d7ef4c90

  • Size

    51KB

  • Sample

    241110-jjjdzsseqj

  • MD5

    3212ecdd54ce771a5699388ad30ded78

  • SHA1

    0890d5244218196490fa3b9ecfe71a97b50405a8

  • SHA256

    234a34ce7b1de3195354c04d39b097c911a1c64a22514e322b176eb0d7ef4c90

  • SHA512

    a3e00b0e05c7e22c6108295f9410574884aacf66f23c405a00d19a92d02dfabb809bdeb939d60bb9c4d98bb9d68aee91028155c584b3339c5b7b703a73ce4586

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fboBJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      234a34ce7b1de3195354c04d39b097c911a1c64a22514e322b176eb0d7ef4c90

    • Size

      51KB

    • MD5

      3212ecdd54ce771a5699388ad30ded78

    • SHA1

      0890d5244218196490fa3b9ecfe71a97b50405a8

    • SHA256

      234a34ce7b1de3195354c04d39b097c911a1c64a22514e322b176eb0d7ef4c90

    • SHA512

      a3e00b0e05c7e22c6108295f9410574884aacf66f23c405a00d19a92d02dfabb809bdeb939d60bb9c4d98bb9d68aee91028155c584b3339c5b7b703a73ce4586

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fboBJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks