General

  • Target

    7fd80e449b088997768dbdadd47cd8b6547a9793b3820acab7401dac9a1ef963

  • Size

    51KB

  • Sample

    241111-3xkczszdrq

  • MD5

    f2c72af793988962e3d177207c6c7ca6

  • SHA1

    5dc229e329d7fa01b283f3a09951a9d1274f3a7c

  • SHA256

    7fd80e449b088997768dbdadd47cd8b6547a9793b3820acab7401dac9a1ef963

  • SHA512

    74f39fa0781a414f04f34c625a2de78ff9e25c961cb8ec0ab81801dd25491e055b1e9e45a86da146fa7783d3f5445a4839a80b1bac22554570de6b30b28af76b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLKJYH5:1dWubF3n9S91BF3fboOJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7fd80e449b088997768dbdadd47cd8b6547a9793b3820acab7401dac9a1ef963

    • Size

      51KB

    • MD5

      f2c72af793988962e3d177207c6c7ca6

    • SHA1

      5dc229e329d7fa01b283f3a09951a9d1274f3a7c

    • SHA256

      7fd80e449b088997768dbdadd47cd8b6547a9793b3820acab7401dac9a1ef963

    • SHA512

      74f39fa0781a414f04f34c625a2de78ff9e25c961cb8ec0ab81801dd25491e055b1e9e45a86da146fa7783d3f5445a4839a80b1bac22554570de6b30b28af76b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLKJYH5:1dWubF3n9S91BF3fboOJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks