General

  • Target

    3c6ea6da4f903666fd2f1248fa22ce6015a345665321635df4d630eabcece1ff

  • Size

    51KB

  • Sample

    241111-waeqnasgqg

  • MD5

    30956cb12d862044cb89c267a3a669eb

  • SHA1

    23aa710f8dc25e2df484e92462da456ebda7f689

  • SHA256

    3c6ea6da4f903666fd2f1248fa22ce6015a345665321635df4d630eabcece1ff

  • SHA512

    b94b055ba6a84848e5e4a56bd8b66ec1231f9470a4e433f2667412c54a50a45991f7690003c774b44cac7da4291936f747577eadbeb78e5981f90d75db3865ba

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboFJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3c6ea6da4f903666fd2f1248fa22ce6015a345665321635df4d630eabcece1ff

    • Size

      51KB

    • MD5

      30956cb12d862044cb89c267a3a669eb

    • SHA1

      23aa710f8dc25e2df484e92462da456ebda7f689

    • SHA256

      3c6ea6da4f903666fd2f1248fa22ce6015a345665321635df4d630eabcece1ff

    • SHA512

      b94b055ba6a84848e5e4a56bd8b66ec1231f9470a4e433f2667412c54a50a45991f7690003c774b44cac7da4291936f747577eadbeb78e5981f90d75db3865ba

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboFJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks