General

  • Target

    ba02edf62b06cd62963c93db27c04cc8a8e48c95f44d67ff2b8e447ebfd5b5b1

  • Size

    51KB

  • Sample

    241111-3vzpwszdjc

  • MD5

    ee7947a88a5be672cf6e81d923f12c50

  • SHA1

    c84b581671c25e0805dd49ed8a7f02751ad42a1a

  • SHA256

    ba02edf62b06cd62963c93db27c04cc8a8e48c95f44d67ff2b8e447ebfd5b5b1

  • SHA512

    59d201732e45be36823785a3ebe8bd5a43c2717667d59dd4082ad4b820415d421065a1923913f089b8f1cff6f37b10c2d8f4219dc23219f0ad15b621e7ce9462

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbo7JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ba02edf62b06cd62963c93db27c04cc8a8e48c95f44d67ff2b8e447ebfd5b5b1

    • Size

      51KB

    • MD5

      ee7947a88a5be672cf6e81d923f12c50

    • SHA1

      c84b581671c25e0805dd49ed8a7f02751ad42a1a

    • SHA256

      ba02edf62b06cd62963c93db27c04cc8a8e48c95f44d67ff2b8e447ebfd5b5b1

    • SHA512

      59d201732e45be36823785a3ebe8bd5a43c2717667d59dd4082ad4b820415d421065a1923913f089b8f1cff6f37b10c2d8f4219dc23219f0ad15b621e7ce9462

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbo7JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks