General

  • Target

    51e1bb91d87dd20745e0cf767ed0a2ef01f1d869ade791393f7a2d3da1ab30dc

  • Size

    51KB

  • Sample

    241114-vpm5xa1gjg

  • MD5

    45ae436ae054fb3cfe431b621b9513ca

  • SHA1

    8fd5d1a8563bbb582d75854d1548bf21955fc9a8

  • SHA256

    51e1bb91d87dd20745e0cf767ed0a2ef01f1d869ade791393f7a2d3da1ab30dc

  • SHA512

    101cb21b93328f7dbc2f67bc4f8f7f3d0beaab3f98e3731bd8a5fcd1a78dab728f83d8202d293a90c1a78b3f1bbef9059fbcc5475a03f247345d45198c4426b8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboKJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      51e1bb91d87dd20745e0cf767ed0a2ef01f1d869ade791393f7a2d3da1ab30dc

    • Size

      51KB

    • MD5

      45ae436ae054fb3cfe431b621b9513ca

    • SHA1

      8fd5d1a8563bbb582d75854d1548bf21955fc9a8

    • SHA256

      51e1bb91d87dd20745e0cf767ed0a2ef01f1d869ade791393f7a2d3da1ab30dc

    • SHA512

      101cb21b93328f7dbc2f67bc4f8f7f3d0beaab3f98e3731bd8a5fcd1a78dab728f83d8202d293a90c1a78b3f1bbef9059fbcc5475a03f247345d45198c4426b8

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLeJYH5:1dWubF3n9S91BF3fboKJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks