General

  • Target

    7562b365cdb9ed1e861149c0834f949ad21571009b2cb66b319ebd39cf1292e5

  • Size

    51KB

  • Sample

    241110-qzk13syanf

  • MD5

    a06b2a7d2887e60e50a5553249d2b438

  • SHA1

    5f22e7a6d8db171f391aebe0f58cc7628c16d73c

  • SHA256

    7562b365cdb9ed1e861149c0834f949ad21571009b2cb66b319ebd39cf1292e5

  • SHA512

    71582cc754911e404c263b25eafdf82b7f2f9549f337221d649bbaa3ac5417f82b2621920cb069e5f908f94dc119355e42eada79129d881049907d5b3f9e1139

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLBJYH5:1dWubF3n9S91BF3fbotJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7562b365cdb9ed1e861149c0834f949ad21571009b2cb66b319ebd39cf1292e5

    • Size

      51KB

    • MD5

      a06b2a7d2887e60e50a5553249d2b438

    • SHA1

      5f22e7a6d8db171f391aebe0f58cc7628c16d73c

    • SHA256

      7562b365cdb9ed1e861149c0834f949ad21571009b2cb66b319ebd39cf1292e5

    • SHA512

      71582cc754911e404c263b25eafdf82b7f2f9549f337221d649bbaa3ac5417f82b2621920cb069e5f908f94dc119355e42eada79129d881049907d5b3f9e1139

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLBJYH5:1dWubF3n9S91BF3fbotJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks