General

  • Target

    7e2e954b7b246026771fbaddee1d54ced064745227ae73870d586567d116cfaf

  • Size

    51KB

  • Sample

    241114-vmv3qs1kby

  • MD5

    2979c3aad87c9b6a505d424fc54e38aa

  • SHA1

    df8f423175779b50a23e80dddb4c00567f5aeda2

  • SHA256

    7e2e954b7b246026771fbaddee1d54ced064745227ae73870d586567d116cfaf

  • SHA512

    f94f5e4c0bcfcb6f70dc24320a5d5960fad80082e190b9da55413e6314900ca4afde6ff75ceac09a8a8deb26fb0b041dcca463a0dcf1b234b3af78ae2cdf5f0c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLHJYH5:1dWubF3n9S91BF3fbozJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      7e2e954b7b246026771fbaddee1d54ced064745227ae73870d586567d116cfaf

    • Size

      51KB

    • MD5

      2979c3aad87c9b6a505d424fc54e38aa

    • SHA1

      df8f423175779b50a23e80dddb4c00567f5aeda2

    • SHA256

      7e2e954b7b246026771fbaddee1d54ced064745227ae73870d586567d116cfaf

    • SHA512

      f94f5e4c0bcfcb6f70dc24320a5d5960fad80082e190b9da55413e6314900ca4afde6ff75ceac09a8a8deb26fb0b041dcca463a0dcf1b234b3af78ae2cdf5f0c

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLHJYH5:1dWubF3n9S91BF3fbozJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks