General

  • Target

    ad0933d05a714105126b0c5aa0be07e10c0338ba72b6fdbc5aac892c487d48e2

  • Size

    51KB

  • Sample

    241111-3xbe3szdqq

  • MD5

    17b30078576996d1ce55b04decf20091

  • SHA1

    4f5376c824c9ec1cd13396a76e34c440be7e898d

  • SHA256

    ad0933d05a714105126b0c5aa0be07e10c0338ba72b6fdbc5aac892c487d48e2

  • SHA512

    65b37463584c82b946fae60321972f83997c695e58a3ffc075145c379746ff1b8326459e071ff9ddc4999aa33fb8bb955bfd8c048a8cf5a944dc757e4069905d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLPJYH5:1dWubF3n9S91BF3fboLJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ad0933d05a714105126b0c5aa0be07e10c0338ba72b6fdbc5aac892c487d48e2

    • Size

      51KB

    • MD5

      17b30078576996d1ce55b04decf20091

    • SHA1

      4f5376c824c9ec1cd13396a76e34c440be7e898d

    • SHA256

      ad0933d05a714105126b0c5aa0be07e10c0338ba72b6fdbc5aac892c487d48e2

    • SHA512

      65b37463584c82b946fae60321972f83997c695e58a3ffc075145c379746ff1b8326459e071ff9ddc4999aa33fb8bb955bfd8c048a8cf5a944dc757e4069905d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLPJYH5:1dWubF3n9S91BF3fboLJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks