Overview

overview

10

Static

static

10

e88824aa7b...18.exe

windows7-x64

10

e88824aa7b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e88824aa7bf5ed456771b4712db445c1_JaffaCakes118

  • Size

    201KB

  • Sample

    240408-115f8age91

  • MD5

    e88824aa7bf5ed456771b4712db445c1

  • SHA1

    661e1e83da3033b6e60fac05f0d9b4b4a695ec36

  • SHA256

    8a0bd42a625825a60ef70b82c2092a7ba40f70903f1d9a896f46df9958e5396a

  • SHA512

    d6b09a894c927deba60fa6129b9951fb706c737944ec96d184d2ae0d108b7a72f346152de25343796d16222625bfd6c22b3d12e6c63a76f2df4db6876a859363

  • SSDEEP

    3072:wQYFWQDxX9Rf/bUH9B18vrsKoksEKOxix3+LwwXx0FWlYVAjPjLnV:B1exrS9j0YKTsEKOxJLwwWFBAXp

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      e88824aa7bf5ed456771b4712db445c1_JaffaCakes118

    • Size

      201KB

    • MD5

      e88824aa7bf5ed456771b4712db445c1

    • SHA1

      661e1e83da3033b6e60fac05f0d9b4b4a695ec36

    • SHA256

      8a0bd42a625825a60ef70b82c2092a7ba40f70903f1d9a896f46df9958e5396a

    • SHA512

      d6b09a894c927deba60fa6129b9951fb706c737944ec96d184d2ae0d108b7a72f346152de25343796d16222625bfd6c22b3d12e6c63a76f2df4db6876a859363

    • SSDEEP

      3072:wQYFWQDxX9Rf/bUH9B18vrsKoksEKOxix3+LwwXx0FWlYVAjPjLnV:B1exrS9j0YKTsEKOxJLwwWFBAXp

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks