General

  • Target

    0bb4af02bed2620a2921d4bcf6a7f99b3e0c4ce4980ad2eb56835ffc6e641dc7

  • Size

    51KB

  • Sample

    241111-3s3c1azcne

  • MD5

    1f127f0300b996e22f0baa5f8e2cbe34

  • SHA1

    58a4e26d6da454571b692910c25bdc4df6542bc8

  • SHA256

    0bb4af02bed2620a2921d4bcf6a7f99b3e0c4ce4980ad2eb56835ffc6e641dc7

  • SHA512

    d32faf01662aa69dd5416340f96227567212cc506404d91f4beaeec590968e87740a7b9425ee884186899a2f279182a106ae73889696377741be972cb8eed4e7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLLJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0bb4af02bed2620a2921d4bcf6a7f99b3e0c4ce4980ad2eb56835ffc6e641dc7

    • Size

      51KB

    • MD5

      1f127f0300b996e22f0baa5f8e2cbe34

    • SHA1

      58a4e26d6da454571b692910c25bdc4df6542bc8

    • SHA256

      0bb4af02bed2620a2921d4bcf6a7f99b3e0c4ce4980ad2eb56835ffc6e641dc7

    • SHA512

      d32faf01662aa69dd5416340f96227567212cc506404d91f4beaeec590968e87740a7b9425ee884186899a2f279182a106ae73889696377741be972cb8eed4e7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLLJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks