General

  • Target

    73b6d993020795b52a553fcb5d2bcc72e31ed5d181510af4cde7f3c56992dd98

  • Size

    51KB

  • Sample

    241110-p1wzasxbkn

  • MD5

    f85ec47ff210f9c4ce4af1d77542287a

  • SHA1

    695c21d9bce2fd3240eafd478481444558feed37

  • SHA256

    73b6d993020795b52a553fcb5d2bcc72e31ed5d181510af4cde7f3c56992dd98

  • SHA512

    cd23528f51ea46fb90adf92910423348692d55da8979b185cd2f2ac6547b1ca189de4df7c9852dd12d9411de5de7fa50bf5fa8330480dc79bb8af8e52cbed874

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLZJYH5:1dWubF3n9S91BF3fboVJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      73b6d993020795b52a553fcb5d2bcc72e31ed5d181510af4cde7f3c56992dd98

    • Size

      51KB

    • MD5

      f85ec47ff210f9c4ce4af1d77542287a

    • SHA1

      695c21d9bce2fd3240eafd478481444558feed37

    • SHA256

      73b6d993020795b52a553fcb5d2bcc72e31ed5d181510af4cde7f3c56992dd98

    • SHA512

      cd23528f51ea46fb90adf92910423348692d55da8979b185cd2f2ac6547b1ca189de4df7c9852dd12d9411de5de7fa50bf5fa8330480dc79bb8af8e52cbed874

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLZJYH5:1dWubF3n9S91BF3fboVJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks