General

  • Target

    dbdb127fda91593cc807b4425f40d1773d09bcce88120f43e06437c99f097bbb

  • Size

    51KB

  • Sample

    241110-zlmr7avfmg

  • MD5

    4cf65a537f16706f88c971e5b924d78c

  • SHA1

    d1157d2df947679555fee1c31ba1d0c6b9340159

  • SHA256

    dbdb127fda91593cc807b4425f40d1773d09bcce88120f43e06437c99f097bbb

  • SHA512

    5e4f536826415fd37e37d790001200308d31acafcf1c78920154bf3e17c7db3197f8b259c93c3473e94fa0626507cf5cf53804a97f49ff74bddddaf30eb11686

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbogJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      dbdb127fda91593cc807b4425f40d1773d09bcce88120f43e06437c99f097bbb

    • Size

      51KB

    • MD5

      4cf65a537f16706f88c971e5b924d78c

    • SHA1

      d1157d2df947679555fee1c31ba1d0c6b9340159

    • SHA256

      dbdb127fda91593cc807b4425f40d1773d09bcce88120f43e06437c99f097bbb

    • SHA512

      5e4f536826415fd37e37d790001200308d31acafcf1c78920154bf3e17c7db3197f8b259c93c3473e94fa0626507cf5cf53804a97f49ff74bddddaf30eb11686

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL8JYH5:1dWubF3n9S91BF3fbogJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks