General

  • Target

    6c6ebdc10a054df56c23244f40c21a2a0aeb95b1aceaf9facd97fa87408b2e1c

  • Size

    51KB

  • Sample

    241111-3vjzfazdnj

  • MD5

    d3ee6f73676fae8587d3982a619abe4a

  • SHA1

    7ece84b3625cbb3babd6a25d0733f2b55644c165

  • SHA256

    6c6ebdc10a054df56c23244f40c21a2a0aeb95b1aceaf9facd97fa87408b2e1c

  • SHA512

    4a3b8c4320eb10b62df3e3e614ef3294fed40fe486860052a47ff56853dc05e0867a67dda7362f9969f7f838825c8821221631efd0b9bd222d5f320c7b5ef9a4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fboTJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6c6ebdc10a054df56c23244f40c21a2a0aeb95b1aceaf9facd97fa87408b2e1c

    • Size

      51KB

    • MD5

      d3ee6f73676fae8587d3982a619abe4a

    • SHA1

      7ece84b3625cbb3babd6a25d0733f2b55644c165

    • SHA256

      6c6ebdc10a054df56c23244f40c21a2a0aeb95b1aceaf9facd97fa87408b2e1c

    • SHA512

      4a3b8c4320eb10b62df3e3e614ef3294fed40fe486860052a47ff56853dc05e0867a67dda7362f9969f7f838825c8821221631efd0b9bd222d5f320c7b5ef9a4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fboTJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks