General

  • Target

    3ce77d3369f418770d143095388593d27869fe56558767166e2d8304366013e2

  • Size

    51KB

  • Sample

    250127-nxpkdawrfz

  • MD5

    cc40237dad1b0f635d65234dd8db0e61

  • SHA1

    b3af3bc79983cd181cc6415937ea37d4add0173b

  • SHA256

    3ce77d3369f418770d143095388593d27869fe56558767166e2d8304366013e2

  • SHA512

    7b8079e2274d73d876fb5f95d8802f78f024053c32756db68416ec50f83025bede1fdd108be8191b08268071ce6b57e5b4ea584806a87798651f6acfdcdeb433

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboVJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      3ce77d3369f418770d143095388593d27869fe56558767166e2d8304366013e2

    • Size

      51KB

    • MD5

      cc40237dad1b0f635d65234dd8db0e61

    • SHA1

      b3af3bc79983cd181cc6415937ea37d4add0173b

    • SHA256

      3ce77d3369f418770d143095388593d27869fe56558767166e2d8304366013e2

    • SHA512

      7b8079e2274d73d876fb5f95d8802f78f024053c32756db68416ec50f83025bede1fdd108be8191b08268071ce6b57e5b4ea584806a87798651f6acfdcdeb433

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLxJYH5:1dWubF3n9S91BF3fboVJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks