General

  • Target

    5147a1969b605516de9564666be0b52cd88f0b5774ec3cdd32cc56de642ab4ec

  • Size

    51KB

  • Sample

    241111-3swv8azdjk

  • MD5

    b2248caaced8770c27e617df62d75f4d

  • SHA1

    6fd5e69b988d1bc436c338e7226bf44bfa5f04ae

  • SHA256

    5147a1969b605516de9564666be0b52cd88f0b5774ec3cdd32cc56de642ab4ec

  • SHA512

    c65b53feee05348ee88206dd967b71e8347b3fd61b6e0ea86cbdd937a5d602917d618a0c410c5bf38ac321f8aadacf2d33760ce254860944f4c5bdbe128fa544

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL9JYH5:1dWubF3n9S91BF3fboZJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      5147a1969b605516de9564666be0b52cd88f0b5774ec3cdd32cc56de642ab4ec

    • Size

      51KB

    • MD5

      b2248caaced8770c27e617df62d75f4d

    • SHA1

      6fd5e69b988d1bc436c338e7226bf44bfa5f04ae

    • SHA256

      5147a1969b605516de9564666be0b52cd88f0b5774ec3cdd32cc56de642ab4ec

    • SHA512

      c65b53feee05348ee88206dd967b71e8347b3fd61b6e0ea86cbdd937a5d602917d618a0c410c5bf38ac321f8aadacf2d33760ce254860944f4c5bdbe128fa544

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL9JYH5:1dWubF3n9S91BF3fboZJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks