General

  • Target

    01ee5d75a1cf7bbba9281ae8f7ecf6ca55844bc634c295ebf2c95b16708d502a

  • Size

    51KB

  • Sample

    241112-lj6wdssphj

  • MD5

    8ba001f86f9ae9ac5550a293bc530470

  • SHA1

    b6e28fc19fc89173bf93d0f88fd0a3e68e939969

  • SHA256

    01ee5d75a1cf7bbba9281ae8f7ecf6ca55844bc634c295ebf2c95b16708d502a

  • SHA512

    25f2d801344199e9c6af482aa9225a3bb8a071a1c5b14664cc0b12cbf2a797dcf8f4fd4e3414376c5ba64946d66c3e0148e6a057129b67aa048edbe9189bc032

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboCJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      01ee5d75a1cf7bbba9281ae8f7ecf6ca55844bc634c295ebf2c95b16708d502a

    • Size

      51KB

    • MD5

      8ba001f86f9ae9ac5550a293bc530470

    • SHA1

      b6e28fc19fc89173bf93d0f88fd0a3e68e939969

    • SHA256

      01ee5d75a1cf7bbba9281ae8f7ecf6ca55844bc634c295ebf2c95b16708d502a

    • SHA512

      25f2d801344199e9c6af482aa9225a3bb8a071a1c5b14664cc0b12cbf2a797dcf8f4fd4e3414376c5ba64946d66c3e0148e6a057129b67aa048edbe9189bc032

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+JYH5:1dWubF3n9S91BF3fboCJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks