General

  • Target

    0c77455cfc09fe33951710545c458c1c15e08fd565ea1adc6d9e4b612a89db57

  • Size

    51KB

  • Sample

    241230-s44ebs1mev

  • MD5

    c97124765119a01475501a174c943d34

  • SHA1

    3bdf92615ff68485147a1b2d0eba85fc3593aade

  • SHA256

    0c77455cfc09fe33951710545c458c1c15e08fd565ea1adc6d9e4b612a89db57

  • SHA512

    c1c59ab29742c72a41915ff1a8fbdbb3ba871ed39a50721cd3a034fd8a653a2aa1ccca5bbd1c06435253bbbb7fa645b6ddc4956915a1894699dc5d75539d185e

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbo/JYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0c77455cfc09fe33951710545c458c1c15e08fd565ea1adc6d9e4b612a89db57

    • Size

      51KB

    • MD5

      c97124765119a01475501a174c943d34

    • SHA1

      3bdf92615ff68485147a1b2d0eba85fc3593aade

    • SHA256

      0c77455cfc09fe33951710545c458c1c15e08fd565ea1adc6d9e4b612a89db57

    • SHA512

      c1c59ab29742c72a41915ff1a8fbdbb3ba871ed39a50721cd3a034fd8a653a2aa1ccca5bbd1c06435253bbbb7fa645b6ddc4956915a1894699dc5d75539d185e

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbo/JYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks