General

  • Target

    2a617ada9086b1f8082fb618355381f43d2ca666c60c1eba1d2635da8b4042f7

  • Size

    51KB

  • Sample

    241114-ak31ca1hre

  • MD5

    9c25c54699703c270b179896527ac9cd

  • SHA1

    411dd98078a5e41fdd50ce34cd90210c6dd3f6ac

  • SHA256

    2a617ada9086b1f8082fb618355381f43d2ca666c60c1eba1d2635da8b4042f7

  • SHA512

    756cc456abedd2eb16e4e4ec4baba747822742bcc122e85f92f6ac73cca63e83176515f9133b99f3613378e7bd9c9d13c46fe5b0f0794c5408d5d5b18fe3f1be

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLRJYH5:1dWubF3n9S91BF3fbo1JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      2a617ada9086b1f8082fb618355381f43d2ca666c60c1eba1d2635da8b4042f7

    • Size

      51KB

    • MD5

      9c25c54699703c270b179896527ac9cd

    • SHA1

      411dd98078a5e41fdd50ce34cd90210c6dd3f6ac

    • SHA256

      2a617ada9086b1f8082fb618355381f43d2ca666c60c1eba1d2635da8b4042f7

    • SHA512

      756cc456abedd2eb16e4e4ec4baba747822742bcc122e85f92f6ac73cca63e83176515f9133b99f3613378e7bd9c9d13c46fe5b0f0794c5408d5d5b18fe3f1be

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLRJYH5:1dWubF3n9S91BF3fbo1JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks