General

  • Target

    0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

  • Size

    51KB

  • Sample

    250127-3snvlszla1

  • MD5

    c6f010a6e82df35c27d0e225a69f90e6

  • SHA1

    d36bc11c56be477acf8f1474a82a676ec62cf354

  • SHA256

    0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

  • SHA512

    0a0a62f546a8f4f63bdfe085dc13b81bca1e9473532d8a939d777d06af4b98a8970ad6dcf5a2ff11ba47bcaf8bb97444038ed0e72deb08e365a3fa8f2fe52dc4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

    • Size

      51KB

    • MD5

      c6f010a6e82df35c27d0e225a69f90e6

    • SHA1

      d36bc11c56be477acf8f1474a82a676ec62cf354

    • SHA256

      0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

    • SHA512

      0a0a62f546a8f4f63bdfe085dc13b81bca1e9473532d8a939d777d06af4b98a8970ad6dcf5a2ff11ba47bcaf8bb97444038ed0e72deb08e365a3fa8f2fe52dc4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks