General

  • Target

    50a238f65ba202f0f1b10b25aff646f0565a9b4b358e2e1c9893cfff19c83578

  • Size

    51KB

  • Sample

    241111-3vjcxasqgk

  • MD5

    6250edf5b4d4fd9579b198e05a0ca472

  • SHA1

    6691e2d963d8af13d0893a1e7d3039351924136a

  • SHA256

    50a238f65ba202f0f1b10b25aff646f0565a9b4b358e2e1c9893cfff19c83578

  • SHA512

    3c50e33b6cb07e512e59379776e326cfb761c9a61f75b34523503764a386763ff13478373709f37c5b9a35b29cfcfa2435b64f2f368da0892c8515064ba799a8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      50a238f65ba202f0f1b10b25aff646f0565a9b4b358e2e1c9893cfff19c83578

    • Size

      51KB

    • MD5

      6250edf5b4d4fd9579b198e05a0ca472

    • SHA1

      6691e2d963d8af13d0893a1e7d3039351924136a

    • SHA256

      50a238f65ba202f0f1b10b25aff646f0565a9b4b358e2e1c9893cfff19c83578

    • SHA512

      3c50e33b6cb07e512e59379776e326cfb761c9a61f75b34523503764a386763ff13478373709f37c5b9a35b29cfcfa2435b64f2f368da0892c8515064ba799a8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLuJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks