General

  • Target

    adece8e5e32a396253d222351179e596bef501640927f1fe6a4e5f5b1fb2ad3a

  • Size

    51KB

  • Sample

    241110-q7rhts1mfl

  • MD5

    8f40a4d06240fd46a09edb286a979136

  • SHA1

    2305ec896b39e3f7d79867bd77f0702bd8818c6f

  • SHA256

    adece8e5e32a396253d222351179e596bef501640927f1fe6a4e5f5b1fb2ad3a

  • SHA512

    b8f1a4e779154ba45eeba7f6f2a5ec32873c3820ecd34b13724bd3408d712692e5e591202dd67dc9f5d5e9ae581e325d0e8599bbf807afd0239541e1bf019cb0

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboiJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      adece8e5e32a396253d222351179e596bef501640927f1fe6a4e5f5b1fb2ad3a

    • Size

      51KB

    • MD5

      8f40a4d06240fd46a09edb286a979136

    • SHA1

      2305ec896b39e3f7d79867bd77f0702bd8818c6f

    • SHA256

      adece8e5e32a396253d222351179e596bef501640927f1fe6a4e5f5b1fb2ad3a

    • SHA512

      b8f1a4e779154ba45eeba7f6f2a5ec32873c3820ecd34b13724bd3408d712692e5e591202dd67dc9f5d5e9ae581e325d0e8599bbf807afd0239541e1bf019cb0

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboiJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks