General

  • Target

    126cc0c85e1ae5a1e1a6134d8deca1d073bf7503d203d11c8c469f00ab850d17

  • Size

    51KB

  • Sample

    241230-s44ebsymbn

  • MD5

    5a7b0b14e6d15e9fe2925896edf84651

  • SHA1

    94ce27b37c9cd6478330ba60b3c101ba78361fac

  • SHA256

    126cc0c85e1ae5a1e1a6134d8deca1d073bf7503d203d11c8c469f00ab850d17

  • SHA512

    a678dd2934fd6899e77f9ee29bbd51f9d45431b60a9a8081c3aaf58f6165197253609d306642184a83f8889369bbceea1fa2f70f56b50da0e2107ee694659eea

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboCJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      126cc0c85e1ae5a1e1a6134d8deca1d073bf7503d203d11c8c469f00ab850d17

    • Size

      51KB

    • MD5

      5a7b0b14e6d15e9fe2925896edf84651

    • SHA1

      94ce27b37c9cd6478330ba60b3c101ba78361fac

    • SHA256

      126cc0c85e1ae5a1e1a6134d8deca1d073bf7503d203d11c8c469f00ab850d17

    • SHA512

      a678dd2934fd6899e77f9ee29bbd51f9d45431b60a9a8081c3aaf58f6165197253609d306642184a83f8889369bbceea1fa2f70f56b50da0e2107ee694659eea

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fboCJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks