General

  • Target

    0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

  • Size

    51KB

  • Sample

    250127-3zm7nazraj

  • MD5

    c6f010a6e82df35c27d0e225a69f90e6

  • SHA1

    d36bc11c56be477acf8f1474a82a676ec62cf354

  • SHA256

    0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

  • SHA512

    0a0a62f546a8f4f63bdfe085dc13b81bca1e9473532d8a939d777d06af4b98a8970ad6dcf5a2ff11ba47bcaf8bb97444038ed0e72deb08e365a3fa8f2fe52dc4

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

    • Size

      51KB

    • MD5

      c6f010a6e82df35c27d0e225a69f90e6

    • SHA1

      d36bc11c56be477acf8f1474a82a676ec62cf354

    • SHA256

      0a7ed411ca54335eac65c0b9f145bdfdc066443e967fec4655214c1f5fea310b

    • SHA512

      0a0a62f546a8f4f63bdfe085dc13b81bca1e9473532d8a939d777d06af4b98a8970ad6dcf5a2ff11ba47bcaf8bb97444038ed0e72deb08e365a3fa8f2fe52dc4

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fbobJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.