General

  • Target

    577ef0e94355553422458acd9fb6f200985763938e4b39a7e71540cff0f8931b

  • Size

    51KB

  • Sample

    241110-ntwjhswfjf

  • MD5

    74eb2fb6140e2a1976d6604bef2d7d61

  • SHA1

    551103621e6d7474b919ae595b61a70d4de76779

  • SHA256

    577ef0e94355553422458acd9fb6f200985763938e4b39a7e71540cff0f8931b

  • SHA512

    e15dfb25049e73c2276c0b6f80ad807a544defcfd03c5bf7d04ef3605007b8c1b793395adc91b1a5c993c29f00060428e0bc1bb0c7a4faaf68bf1e0795b6f817

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboMJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      577ef0e94355553422458acd9fb6f200985763938e4b39a7e71540cff0f8931b

    • Size

      51KB

    • MD5

      74eb2fb6140e2a1976d6604bef2d7d61

    • SHA1

      551103621e6d7474b919ae595b61a70d4de76779

    • SHA256

      577ef0e94355553422458acd9fb6f200985763938e4b39a7e71540cff0f8931b

    • SHA512

      e15dfb25049e73c2276c0b6f80ad807a544defcfd03c5bf7d04ef3605007b8c1b793395adc91b1a5c993c29f00060428e0bc1bb0c7a4faaf68bf1e0795b6f817

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboMJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks