General

  • Target

    ad7c1c3ee5017331e5920662e61578470bad6dd40b8237eb62c9c3063a7b176c

  • Size

    51KB

  • Sample

    241114-vqha2s1kc1

  • MD5

    0cc44289c7ccd1fc99fe0477ef0ed5a8

  • SHA1

    74a938b61e5020526b6a3d4ba412f67b3ed566a5

  • SHA256

    ad7c1c3ee5017331e5920662e61578470bad6dd40b8237eb62c9c3063a7b176c

  • SHA512

    cb836ce2186a5fce08c1bab650f66078a9dca1ba27bd15ea6db73a61fdc652f8c3c8ed752dd62aca822cee825cd979947fc951ba36efd99a109ca2faf3bdd6a5

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLXJYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      ad7c1c3ee5017331e5920662e61578470bad6dd40b8237eb62c9c3063a7b176c

    • Size

      51KB

    • MD5

      0cc44289c7ccd1fc99fe0477ef0ed5a8

    • SHA1

      74a938b61e5020526b6a3d4ba412f67b3ed566a5

    • SHA256

      ad7c1c3ee5017331e5920662e61578470bad6dd40b8237eb62c9c3063a7b176c

    • SHA512

      cb836ce2186a5fce08c1bab650f66078a9dca1ba27bd15ea6db73a61fdc652f8c3c8ed752dd62aca822cee825cd979947fc951ba36efd99a109ca2faf3bdd6a5

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLXJYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks