General

  • Target

    ed3260b6dcea9192df23b8d1f614d5826fdc47cf785683992478e397b55be3bf

  • Size

    51KB

  • Sample

    241114-vldr3a1frb

  • MD5

    e682599cedecbc3768104f1167a311ef

  • SHA1

    a2d748f9a5b535e12dc8924c01570a2b53eb0183

  • SHA256

    ed3260b6dcea9192df23b8d1f614d5826fdc47cf785683992478e397b55be3bf

  • SHA512

    4b002d45e9a8c3efefac2a5ac3cc95d80d7448e558d3ac757bde5857cae67ac804a82510865deefb9b6532735db0d71565ff7b14b44163623d3c8674b8716b43

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLVJYH5:1dWubF3n9S91BF3fboxJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ed3260b6dcea9192df23b8d1f614d5826fdc47cf785683992478e397b55be3bf

    • Size

      51KB

    • MD5

      e682599cedecbc3768104f1167a311ef

    • SHA1

      a2d748f9a5b535e12dc8924c01570a2b53eb0183

    • SHA256

      ed3260b6dcea9192df23b8d1f614d5826fdc47cf785683992478e397b55be3bf

    • SHA512

      4b002d45e9a8c3efefac2a5ac3cc95d80d7448e558d3ac757bde5857cae67ac804a82510865deefb9b6532735db0d71565ff7b14b44163623d3c8674b8716b43

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLVJYH5:1dWubF3n9S91BF3fboxJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks