General

  • Target

    213d832dbde5cddb8754d319f0ee64c1ca987faa456e37cb83ac75ef5914ebac

  • Size

    51KB

  • Sample

    241110-yejlhstfma

  • MD5

    ad11bc984e811b155b9602d9f6b48d4b

  • SHA1

    0edfc6da28eb46a4b07aae7878e73736020ebf94

  • SHA256

    213d832dbde5cddb8754d319f0ee64c1ca987faa456e37cb83ac75ef5914ebac

  • SHA512

    fb79c21be547aec739095c5f17478e0e5b84bf628ebe95d93e4c869f87d045bf50b5a32e9f1fea7983ed694fcfc29c04b3168d522dc657e0f374595f77c75695

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fboUJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      213d832dbde5cddb8754d319f0ee64c1ca987faa456e37cb83ac75ef5914ebac

    • Size

      51KB

    • MD5

      ad11bc984e811b155b9602d9f6b48d4b

    • SHA1

      0edfc6da28eb46a4b07aae7878e73736020ebf94

    • SHA256

      213d832dbde5cddb8754d319f0ee64c1ca987faa456e37cb83ac75ef5914ebac

    • SHA512

      fb79c21be547aec739095c5f17478e0e5b84bf628ebe95d93e4c869f87d045bf50b5a32e9f1fea7983ed694fcfc29c04b3168d522dc657e0f374595f77c75695

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fboUJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks