General

  • Target

    6a36ce493439860f2e7e087311709e9974fe3297405d7cc4524f5560e1d19a93

  • Size

    51KB

  • Sample

    241113-mmtwnstldk

  • MD5

    ebc429d2d931de3ab10bbdf440151d65

  • SHA1

    151acc44484464df48ead33132011a8312b6822c

  • SHA256

    6a36ce493439860f2e7e087311709e9974fe3297405d7cc4524f5560e1d19a93

  • SHA512

    f1dbe286cd6802f13bba97255639f93ce3e051005a939285afade6457e80963cc8c52da3f34857bf114089a997f63974878ecf7a9959e8a46b9485b65948cb34

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fboAJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      6a36ce493439860f2e7e087311709e9974fe3297405d7cc4524f5560e1d19a93

    • Size

      51KB

    • MD5

      ebc429d2d931de3ab10bbdf440151d65

    • SHA1

      151acc44484464df48ead33132011a8312b6822c

    • SHA256

      6a36ce493439860f2e7e087311709e9974fe3297405d7cc4524f5560e1d19a93

    • SHA512

      f1dbe286cd6802f13bba97255639f93ce3e051005a939285afade6457e80963cc8c52da3f34857bf114089a997f63974878ecf7a9959e8a46b9485b65948cb34

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLkJYH5:1dWubF3n9S91BF3fboAJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks