General

  • Target

    834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

  • Size

    51KB

  • Sample

    241111-v59zlssenl

  • MD5

    44ea1e665ded6c4ea7c121a5686cf114

  • SHA1

    86403c32d11afdb10ceed17cf1a92f5fe6f83b4f

  • SHA256

    834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

  • SHA512

    c0e0036ffba3042fc7c077eb73a132820234b0d652c22f786b8e4ce261b733bb6ab607b4528bbf7b8a5fbbd6f2c0a3a4503133c2c30ae8297c0f205a16a9c68d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbomJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

    • Size

      51KB

    • MD5

      44ea1e665ded6c4ea7c121a5686cf114

    • SHA1

      86403c32d11afdb10ceed17cf1a92f5fe6f83b4f

    • SHA256

      834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

    • SHA512

      c0e0036ffba3042fc7c077eb73a132820234b0d652c22f786b8e4ce261b733bb6ab607b4528bbf7b8a5fbbd6f2c0a3a4503133c2c30ae8297c0f205a16a9c68d

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbomJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks