General

  • Target

    4189246b8282ff1441229a38eb3b53dc9c009af15575acc7116caef5ae819153

  • Size

    51KB

  • Sample

    241110-p11mgszngj

  • MD5

    af0e72aa2b0a53a417085357792ba046

  • SHA1

    41c4bdb8295769d4df86117cd5c2885447f8a519

  • SHA256

    4189246b8282ff1441229a38eb3b53dc9c009af15575acc7116caef5ae819153

  • SHA512

    f43c3d666e4b77ff1eece1e150acc02fa33aff33be04c8b63d6fac1ebee4cb5bf4d44582c25b7f5fdcb97c7321592316e870f96cbf6fd05022fda4803760c0c2

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLpJYH5:1dWubF3n9S91BF3fbodJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      4189246b8282ff1441229a38eb3b53dc9c009af15575acc7116caef5ae819153

    • Size

      51KB

    • MD5

      af0e72aa2b0a53a417085357792ba046

    • SHA1

      41c4bdb8295769d4df86117cd5c2885447f8a519

    • SHA256

      4189246b8282ff1441229a38eb3b53dc9c009af15575acc7116caef5ae819153

    • SHA512

      f43c3d666e4b77ff1eece1e150acc02fa33aff33be04c8b63d6fac1ebee4cb5bf4d44582c25b7f5fdcb97c7321592316e870f96cbf6fd05022fda4803760c0c2

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLpJYH5:1dWubF3n9S91BF3fbodJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks