General

  • Target

    d19f7d43c6d6e0c1ab55b3291176c1aecc2aec9d72110d3d62bd479a1d4f6f0c

  • Size

    51KB

  • Sample

    241113-3q9z3a1gqk

  • MD5

    d6dbabbb1eb6936a607a815349cd7db7

  • SHA1

    cc0bff7277f77530a1dddf7b67e3244ddc15b676

  • SHA256

    d19f7d43c6d6e0c1ab55b3291176c1aecc2aec9d72110d3d62bd479a1d4f6f0c

  • SHA512

    1a76fa3718741bc035df09ba64466c5647427af5293953294440fcd10fac3295abf4a45092204efbfb0d1f5eca561d17ebd2752736b84d77957fd2691de7c09b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLrJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      d19f7d43c6d6e0c1ab55b3291176c1aecc2aec9d72110d3d62bd479a1d4f6f0c

    • Size

      51KB

    • MD5

      d6dbabbb1eb6936a607a815349cd7db7

    • SHA1

      cc0bff7277f77530a1dddf7b67e3244ddc15b676

    • SHA256

      d19f7d43c6d6e0c1ab55b3291176c1aecc2aec9d72110d3d62bd479a1d4f6f0c

    • SHA512

      1a76fa3718741bc035df09ba64466c5647427af5293953294440fcd10fac3295abf4a45092204efbfb0d1f5eca561d17ebd2752736b84d77957fd2691de7c09b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLrJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks