General

  • Target

    43971b5fa2db50f3cebdcade9ffd2b5354386ffb6b824d4a5008fa6e6b9c13f8

  • Size

    51KB

  • Sample

    241114-cgyybsslbz

  • MD5

    0570ad3c317190af9ca696dab522bf65

  • SHA1

    b830b713c1c49382216bc35b148c5d38885584f5

  • SHA256

    43971b5fa2db50f3cebdcade9ffd2b5354386ffb6b824d4a5008fa6e6b9c13f8

  • SHA512

    6b53058a9ca0fc71e9fd089d639868f151885d692d890e053c2f8db90e76d029c337dcdc44dd11a4b4fe3bd72d585557ac0e230b09fb850831594b295786ad3b

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbooJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      43971b5fa2db50f3cebdcade9ffd2b5354386ffb6b824d4a5008fa6e6b9c13f8

    • Size

      51KB

    • MD5

      0570ad3c317190af9ca696dab522bf65

    • SHA1

      b830b713c1c49382216bc35b148c5d38885584f5

    • SHA256

      43971b5fa2db50f3cebdcade9ffd2b5354386ffb6b824d4a5008fa6e6b9c13f8

    • SHA512

      6b53058a9ca0fc71e9fd089d639868f151885d692d890e053c2f8db90e76d029c337dcdc44dd11a4b4fe3bd72d585557ac0e230b09fb850831594b295786ad3b

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLMJYH5:1dWubF3n9S91BF3fbooJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks