General

  • Target

    d9f0c4bf7ba591a95b6ff6cdbbd4b7ced532b5249207eb496ce4275877a1c81a

  • Size

    51KB

  • Sample

    250405-r3cpjssmv2

  • MD5

    7813cd978ac0d4f5bc9305fa2a0e099e

  • SHA1

    de425cbf5f03b08f2e3cc4fcb5d94bb8dca2f740

  • SHA256

    d9f0c4bf7ba591a95b6ff6cdbbd4b7ced532b5249207eb496ce4275877a1c81a

  • SHA512

    93c571aced97a363e5d244c9ff3a6ba51f04b72156fa4752d354487694c6d0837f7f9e6b8f609eda6f2e53c655085a529cae74c92557678e48de70f006e88222

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fboOJYH5

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Targets

    • Target

      d9f0c4bf7ba591a95b6ff6cdbbd4b7ced532b5249207eb496ce4275877a1c81a

    • Size

      51KB

    • MD5

      7813cd978ac0d4f5bc9305fa2a0e099e

    • SHA1

      de425cbf5f03b08f2e3cc4fcb5d94bb8dca2f740

    • SHA256

      d9f0c4bf7ba591a95b6ff6cdbbd4b7ced532b5249207eb496ce4275877a1c81a

    • SHA512

      93c571aced97a363e5d244c9ff3a6ba51f04b72156fa4752d354487694c6d0837f7f9e6b8f609eda6f2e53c655085a529cae74c92557678e48de70f006e88222

    • SSDEEP

      1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fboOJYH5

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks