General

  • Target

    0a33784165ae17a46300cdfe57bdb658308659c0fd40e025d5c1bfef2573f64f

  • Size

    51KB

  • Sample

    241110-p1z1ysznfq

  • MD5

    d64941f5b9fada1dd97eb11fc62048be

  • SHA1

    522b97dd7feabaa17b9e67a8d18f98885de90e53

  • SHA256

    0a33784165ae17a46300cdfe57bdb658308659c0fd40e025d5c1bfef2573f64f

  • SHA512

    5145a3306755daec5f2c6f7b94f64005c3c9caea448699f7f12ec7093ad544605b850143ce66bf7dd3d93567afd24932238d68169e8c09e349a14e02aeba9658

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboxJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0a33784165ae17a46300cdfe57bdb658308659c0fd40e025d5c1bfef2573f64f

    • Size

      51KB

    • MD5

      d64941f5b9fada1dd97eb11fc62048be

    • SHA1

      522b97dd7feabaa17b9e67a8d18f98885de90e53

    • SHA256

      0a33784165ae17a46300cdfe57bdb658308659c0fd40e025d5c1bfef2573f64f

    • SHA512

      5145a3306755daec5f2c6f7b94f64005c3c9caea448699f7f12ec7093ad544605b850143ce66bf7dd3d93567afd24932238d68169e8c09e349a14e02aeba9658

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboxJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks