General

  • Target

    7784d2d82cd56b7befafd131e96f7f8a7ef3fe1d3549777364f775b7467ced37

  • Size

    51KB

  • Sample

    241114-vjprjs1jhz

  • MD5

    7455a6af1cb8008e8e73e2479585e27f

  • SHA1

    ca321b666aaa0e0de23f20e6b36eedaeb03ed65c

  • SHA256

    7784d2d82cd56b7befafd131e96f7f8a7ef3fe1d3549777364f775b7467ced37

  • SHA512

    0bc7fdeb7bacdcd8eaca4bf2fb5a687c79ac901d21da61814159a2c6dbec79f97322cfa63538279a862e0d236e40a0ef05ba2237ef447b185a35e3bfc8869df3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fboLJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7784d2d82cd56b7befafd131e96f7f8a7ef3fe1d3549777364f775b7467ced37

    • Size

      51KB

    • MD5

      7455a6af1cb8008e8e73e2479585e27f

    • SHA1

      ca321b666aaa0e0de23f20e6b36eedaeb03ed65c

    • SHA256

      7784d2d82cd56b7befafd131e96f7f8a7ef3fe1d3549777364f775b7467ced37

    • SHA512

      0bc7fdeb7bacdcd8eaca4bf2fb5a687c79ac901d21da61814159a2c6dbec79f97322cfa63538279a862e0d236e40a0ef05ba2237ef447b185a35e3bfc8869df3

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLfJYH5:1dWubF3n9S91BF3fboLJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks