General

  • Target

    c60711c9d3bb8110589e39c2dafbf87509b3a3f78bbfe9f5103ddcd7f30e24fe

  • Size

    51KB

  • Sample

    241114-vpm5xa1kct

  • MD5

    e829a505559743401f87a01bea86429c

  • SHA1

    baedd12c38443fd2950b4d5b62f3a9d83a99a9bf

  • SHA256

    c60711c9d3bb8110589e39c2dafbf87509b3a3f78bbfe9f5103ddcd7f30e24fe

  • SHA512

    78f1f692cbd7d8ebef03e588757d0fbe09036a2c39c59b45d25bb95933fa833402554d7ea8d483b0b0869fb51bc8155589b4d391ce1ed4f07ddf4aab9e68cfe1

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboFJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      c60711c9d3bb8110589e39c2dafbf87509b3a3f78bbfe9f5103ddcd7f30e24fe

    • Size

      51KB

    • MD5

      e829a505559743401f87a01bea86429c

    • SHA1

      baedd12c38443fd2950b4d5b62f3a9d83a99a9bf

    • SHA256

      c60711c9d3bb8110589e39c2dafbf87509b3a3f78bbfe9f5103ddcd7f30e24fe

    • SHA512

      78f1f692cbd7d8ebef03e588757d0fbe09036a2c39c59b45d25bb95933fa833402554d7ea8d483b0b0869fb51bc8155589b4d391ce1ed4f07ddf4aab9e68cfe1

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLJJYH5:1dWubF3n9S91BF3fboFJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks