General

  • Target

    597ac6465acb156f4b154e08873b8084b393b6ffa28a0bf3adf6e01bc3df99dc

  • Size

    51KB

  • Sample

    241111-hjx2pstqcz

  • MD5

    0262c7d4c0fbc9263b8b9136df032060

  • SHA1

    8a13118350c2e89923ab1f4440c13b46fa98f515

  • SHA256

    597ac6465acb156f4b154e08873b8084b393b6ffa28a0bf3adf6e01bc3df99dc

  • SHA512

    4c965dfc976d82568c1585a67e7ce1e824be80a6197683232f6c3e700d20d351fa6ba1cd1efd6e51f819ea82c086b0a5406e2fe5fc8dd818b1cbe355af9a9729

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLlJYH5:1dWubF3n9S91BF3fboxJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      597ac6465acb156f4b154e08873b8084b393b6ffa28a0bf3adf6e01bc3df99dc

    • Size

      51KB

    • MD5

      0262c7d4c0fbc9263b8b9136df032060

    • SHA1

      8a13118350c2e89923ab1f4440c13b46fa98f515

    • SHA256

      597ac6465acb156f4b154e08873b8084b393b6ffa28a0bf3adf6e01bc3df99dc

    • SHA512

      4c965dfc976d82568c1585a67e7ce1e824be80a6197683232f6c3e700d20d351fa6ba1cd1efd6e51f819ea82c086b0a5406e2fe5fc8dd818b1cbe355af9a9729

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLlJYH5:1dWubF3n9S91BF3fboxJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks