General

  • Target

    b13919a86ec91a578931c03aa28d5ad81875f051ab9310ecfd38981523b4eff8

  • Size

    51KB

  • Sample

    241114-wqq4mavpbm

  • MD5

    cc1d9b733274b72e8fa8babbe5fd3c75

  • SHA1

    8e7a3a314339991a74df3267366672bd194cb581

  • SHA256

    b13919a86ec91a578931c03aa28d5ad81875f051ab9310ecfd38981523b4eff8

  • SHA512

    5a92bd5164c8678099413b51c304809b9de33d6a427f7faf6245870e26a9f3d6226b60cf4123e44037ad99cc9c3ef9810ee99296ee60e0fba6990f9a6721ec5a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      b13919a86ec91a578931c03aa28d5ad81875f051ab9310ecfd38981523b4eff8

    • Size

      51KB

    • MD5

      cc1d9b733274b72e8fa8babbe5fd3c75

    • SHA1

      8e7a3a314339991a74df3267366672bd194cb581

    • SHA256

      b13919a86ec91a578931c03aa28d5ad81875f051ab9310ecfd38981523b4eff8

    • SHA512

      5a92bd5164c8678099413b51c304809b9de33d6a427f7faf6245870e26a9f3d6226b60cf4123e44037ad99cc9c3ef9810ee99296ee60e0fba6990f9a6721ec5a

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLGJYH5:1dWubF3n9S91BF3fboqJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks