General

  • Target

    88535d3df12fe3b243e3ebbdfc67fae976c75afe0597a6b1a515f41703ac61be

  • Size

    51KB

  • Sample

    241114-ah9p4s1hnh

  • MD5

    f8ce96baa6f6a366377784fcf0870e64

  • SHA1

    b76e7b51d741f0c84799ab06be064660fd9ad6fd

  • SHA256

    88535d3df12fe3b243e3ebbdfc67fae976c75afe0597a6b1a515f41703ac61be

  • SHA512

    a0514327ed54cdedf30241a93191d1ff0375de00b0f830e884a0ee935cb7cd7098e2cbcfae018d8749ee772e198182d66c10ccf525d11081ce8233a6c825de9a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fboEJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      88535d3df12fe3b243e3ebbdfc67fae976c75afe0597a6b1a515f41703ac61be

    • Size

      51KB

    • MD5

      f8ce96baa6f6a366377784fcf0870e64

    • SHA1

      b76e7b51d741f0c84799ab06be064660fd9ad6fd

    • SHA256

      88535d3df12fe3b243e3ebbdfc67fae976c75afe0597a6b1a515f41703ac61be

    • SHA512

      a0514327ed54cdedf30241a93191d1ff0375de00b0f830e884a0ee935cb7cd7098e2cbcfae018d8749ee772e198182d66c10ccf525d11081ce8233a6c825de9a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fboEJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks