General

  • Target

    b05eb29f6752e9a4ac83e3a81450d31574adaa01d43c76f3546eaaccf4ae3e92

  • Size

    51KB

  • Sample

    241114-vlepcs1kaz

  • MD5

    89bc5737598be9188ddd976baf888983

  • SHA1

    4a092c35bac49bc1a90aab99d39b8b69a8fc2858

  • SHA256

    b05eb29f6752e9a4ac83e3a81450d31574adaa01d43c76f3546eaaccf4ae3e92

  • SHA512

    10680ee12606c4a78da5567feca4f0d2e6b44eda878cc3b88a6db429a9b33328f0ef8ea970763410e5464085819c4282d576828f6467a1ef8f5e7cfae3fa7719

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboxJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b05eb29f6752e9a4ac83e3a81450d31574adaa01d43c76f3546eaaccf4ae3e92

    • Size

      51KB

    • MD5

      89bc5737598be9188ddd976baf888983

    • SHA1

      4a092c35bac49bc1a90aab99d39b8b69a8fc2858

    • SHA256

      b05eb29f6752e9a4ac83e3a81450d31574adaa01d43c76f3546eaaccf4ae3e92

    • SHA512

      10680ee12606c4a78da5567feca4f0d2e6b44eda878cc3b88a6db429a9b33328f0ef8ea970763410e5464085819c4282d576828f6467a1ef8f5e7cfae3fa7719

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fboxJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks