General

  • Target

    86a0f26e9f311e852ba51ca58f19e43bb7c45456b98422f69ab65ec91cfa552b

  • Size

    51KB

  • Sample

    241110-ntwjhsyqek

  • MD5

    6d8659ac652f90669ed092485e1df665

  • SHA1

    88be9dcec132da7a2b3438218d81df520d03f9df

  • SHA256

    86a0f26e9f311e852ba51ca58f19e43bb7c45456b98422f69ab65ec91cfa552b

  • SHA512

    53e3d1638e19b3f4e0901d2ca88d88f1912328716b5ed05c5b482877b0a6e51f9f000580b1e811ce5842199fc8b3b4411fb6ca8e017433c8b55aae867f7071d3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fboLJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      86a0f26e9f311e852ba51ca58f19e43bb7c45456b98422f69ab65ec91cfa552b

    • Size

      51KB

    • MD5

      6d8659ac652f90669ed092485e1df665

    • SHA1

      88be9dcec132da7a2b3438218d81df520d03f9df

    • SHA256

      86a0f26e9f311e852ba51ca58f19e43bb7c45456b98422f69ab65ec91cfa552b

    • SHA512

      53e3d1638e19b3f4e0901d2ca88d88f1912328716b5ed05c5b482877b0a6e51f9f000580b1e811ce5842199fc8b3b4411fb6ca8e017433c8b55aae867f7071d3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLnJYH5:1dWubF3n9S91BF3fboLJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks