General

  • Target

    3462360343c1d2b5a8fa1fa1d552ac587d05ae885fa35e5cacb27e7be809a009

  • Size

    51KB

  • Sample

    241114-abq97avnek

  • MD5

    55a5e9685f868eb9e9f684d9b272e090

  • SHA1

    5fde613318c5cb1c0fabbeb35d11bc5d077a9f03

  • SHA256

    3462360343c1d2b5a8fa1fa1d552ac587d05ae885fa35e5cacb27e7be809a009

  • SHA512

    7acb1972f6d733a50b8d6d317d8cec10ecac80c69defb0160351dddfb37560da607e3ce61668bfe4c255475b6a1684c71c9f03fd466f0a6028df8ad75510905e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fboGJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3462360343c1d2b5a8fa1fa1d552ac587d05ae885fa35e5cacb27e7be809a009

    • Size

      51KB

    • MD5

      55a5e9685f868eb9e9f684d9b272e090

    • SHA1

      5fde613318c5cb1c0fabbeb35d11bc5d077a9f03

    • SHA256

      3462360343c1d2b5a8fa1fa1d552ac587d05ae885fa35e5cacb27e7be809a009

    • SHA512

      7acb1972f6d733a50b8d6d317d8cec10ecac80c69defb0160351dddfb37560da607e3ce61668bfe4c255475b6a1684c71c9f03fd466f0a6028df8ad75510905e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fboGJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks