General

  • Target

    b127d43d8a05cbb521cd3751d574cd5c7c62e42d098a210ee3a6fc068ad4d925

  • Size

    51KB

  • Sample

    241111-3v9vvsymht

  • MD5

    ffd93b81b2152b1cb3d2146aa85ee5de

  • SHA1

    d0f1a17e00dbc508539b104ee4054b10274051bd

  • SHA256

    b127d43d8a05cbb521cd3751d574cd5c7c62e42d098a210ee3a6fc068ad4d925

  • SHA512

    43aab78a5e38a6798d954fdd140518fbc199beb177ba21b296ac4fc96b814e34f3eae90937cef4ff886a6259681c1d2166792f3a1271b2f2a90d53cafce276fe

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fbowJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b127d43d8a05cbb521cd3751d574cd5c7c62e42d098a210ee3a6fc068ad4d925

    • Size

      51KB

    • MD5

      ffd93b81b2152b1cb3d2146aa85ee5de

    • SHA1

      d0f1a17e00dbc508539b104ee4054b10274051bd

    • SHA256

      b127d43d8a05cbb521cd3751d574cd5c7c62e42d098a210ee3a6fc068ad4d925

    • SHA512

      43aab78a5e38a6798d954fdd140518fbc199beb177ba21b296ac4fc96b814e34f3eae90937cef4ff886a6259681c1d2166792f3a1271b2f2a90d53cafce276fe

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fbowJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks