General

  • Target

    6469c50fca0bd8b9eb1f2fdbf488eff30fc22272388709fa00163a81723b51b0

  • Size

    51KB

  • Sample

    241111-3xegqsynaz

  • MD5

    b1f38100bfd7decb8e030f285fc63b9d

  • SHA1

    b14e48329a099a64950a96a33a3494bc1d2a2221

  • SHA256

    6469c50fca0bd8b9eb1f2fdbf488eff30fc22272388709fa00163a81723b51b0

  • SHA512

    133dc313781bafab3fffcb53d3956f6834209f5f9dc7201c6c28089ce26a571d42269651592de9fedfaa4b493afc9b90f16732f40827cc68d508382f4db3f891

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbooJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6469c50fca0bd8b9eb1f2fdbf488eff30fc22272388709fa00163a81723b51b0

    • Size

      51KB

    • MD5

      b1f38100bfd7decb8e030f285fc63b9d

    • SHA1

      b14e48329a099a64950a96a33a3494bc1d2a2221

    • SHA256

      6469c50fca0bd8b9eb1f2fdbf488eff30fc22272388709fa00163a81723b51b0

    • SHA512

      133dc313781bafab3fffcb53d3956f6834209f5f9dc7201c6c28089ce26a571d42269651592de9fedfaa4b493afc9b90f16732f40827cc68d508382f4db3f891

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLcJYH5:1dWubF3n9S91BF3fbooJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks