General

  • Target

    284f1ad6c27fde5e7a812400a11c24b131ec003b27ccc2896b7129d8ef37c001

  • Size

    51KB

  • Sample

    241114-adbyaasaml

  • MD5

    08da122187e63aa232d4b23f7f71ad17

  • SHA1

    547067da1172ed5baf91cea1c42f8d924609cf15

  • SHA256

    284f1ad6c27fde5e7a812400a11c24b131ec003b27ccc2896b7129d8ef37c001

  • SHA512

    cd47d60e416f4298f247eb0d60804023c80f787f73db4f9b24f336eb73204de7ab9cb075a85288e866c0ccb3e73ab29352d0b1a160b4f4492f9737180b042575

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboMJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      284f1ad6c27fde5e7a812400a11c24b131ec003b27ccc2896b7129d8ef37c001

    • Size

      51KB

    • MD5

      08da122187e63aa232d4b23f7f71ad17

    • SHA1

      547067da1172ed5baf91cea1c42f8d924609cf15

    • SHA256

      284f1ad6c27fde5e7a812400a11c24b131ec003b27ccc2896b7129d8ef37c001

    • SHA512

      cd47d60e416f4298f247eb0d60804023c80f787f73db4f9b24f336eb73204de7ab9cb075a85288e866c0ccb3e73ab29352d0b1a160b4f4492f9737180b042575

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLQJYH5:1dWubF3n9S91BF3fboMJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks