General

  • Target

    781c3105b1a10dd4aea9b58647df02d3148727e01360c75d45ebbc9141f61693

  • Size

    51KB

  • Sample

    241110-py3ztsxaqm

  • MD5

    09f6e4cb2770dd97247049b89aad8414

  • SHA1

    d28e2b91bcdbd4053a14cd29badf8591a6049b34

  • SHA256

    781c3105b1a10dd4aea9b58647df02d3148727e01360c75d45ebbc9141f61693

  • SHA512

    dc0e39e9faa6dcc8e288fec73761422d03181dab2a712c1546fd5a4dab46f12ca3a8a269440979a3ae5b420d7701a2e2a4e0755b9afafd11a083e6177b1f1fb3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+UJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      781c3105b1a10dd4aea9b58647df02d3148727e01360c75d45ebbc9141f61693

    • Size

      51KB

    • MD5

      09f6e4cb2770dd97247049b89aad8414

    • SHA1

      d28e2b91bcdbd4053a14cd29badf8591a6049b34

    • SHA256

      781c3105b1a10dd4aea9b58647df02d3148727e01360c75d45ebbc9141f61693

    • SHA512

      dc0e39e9faa6dcc8e288fec73761422d03181dab2a712c1546fd5a4dab46f12ca3a8a269440979a3ae5b420d7701a2e2a4e0755b9afafd11a083e6177b1f1fb3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+UJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks