General

  • Target

    8becc6b71fa5e88ab46486ac299b9e5b964845a6331e22e63b79a9037e067997

  • Size

    51KB

  • Sample

    241111-3vjcxazdmq

  • MD5

    939fbc31c3d88922ebcf88b1ee5044b2

  • SHA1

    88a400c3a7b268c9a6ace73da4047a975ad3f680

  • SHA256

    8becc6b71fa5e88ab46486ac299b9e5b964845a6331e22e63b79a9037e067997

  • SHA512

    e8cfc9062798106338e5cd74c6b96e4a03388a25e098b3cfae108273f1d4df02377a5328d760f1485352039dab2144c682fb5c42f2b710132ed4c3e4af9762c7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+2JYH5:1dWubF3n9S91BF3fboBJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      8becc6b71fa5e88ab46486ac299b9e5b964845a6331e22e63b79a9037e067997

    • Size

      51KB

    • MD5

      939fbc31c3d88922ebcf88b1ee5044b2

    • SHA1

      88a400c3a7b268c9a6ace73da4047a975ad3f680

    • SHA256

      8becc6b71fa5e88ab46486ac299b9e5b964845a6331e22e63b79a9037e067997

    • SHA512

      e8cfc9062798106338e5cd74c6b96e4a03388a25e098b3cfae108273f1d4df02377a5328d760f1485352039dab2144c682fb5c42f2b710132ed4c3e4af9762c7

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+2JYH5:1dWubF3n9S91BF3fboBJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks