General

  • Target

    54398cb84b32a5be8762b5fa4debf44f1288bf3e3d86f2270dee87d74d00d45b

  • Size

    51KB

  • Sample

    241110-lxf7wsvdjh

  • MD5

    03ea63c6d5227276e89c661a6eda0bab

  • SHA1

    1edb426e399dd40b7239692df35d4c3dfbc307d1

  • SHA256

    54398cb84b32a5be8762b5fa4debf44f1288bf3e3d86f2270dee87d74d00d45b

  • SHA512

    ebe74964621acde220671ab0858f71489df11edd006e8f53a44978f2d7850acf6ff6d9c530347caf18e185ef77ed99efde4e2c0699f0984084b80a0b1b010fff

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLBJYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      54398cb84b32a5be8762b5fa4debf44f1288bf3e3d86f2270dee87d74d00d45b

    • Size

      51KB

    • MD5

      03ea63c6d5227276e89c661a6eda0bab

    • SHA1

      1edb426e399dd40b7239692df35d4c3dfbc307d1

    • SHA256

      54398cb84b32a5be8762b5fa4debf44f1288bf3e3d86f2270dee87d74d00d45b

    • SHA512

      ebe74964621acde220671ab0858f71489df11edd006e8f53a44978f2d7850acf6ff6d9c530347caf18e185ef77ed99efde4e2c0699f0984084b80a0b1b010fff

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLBJYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks