Overview

overview

10

Static

static

7

fbc6d86908...18.exe

windows7-x64

10

fbc6d86908...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbc6d869084c6a465f9ef0c5ba4ef965_JaffaCakes118

  • Size

    114KB

  • Sample

    240420-df32bsee76

  • MD5

    fbc6d869084c6a465f9ef0c5ba4ef965

  • SHA1

    8be135e24f31e0bee789ca4554438ce910c40f3e

  • SHA256

    34206ceaa0199d9fb2f170c8e8d34b6045478e10263adbf048a9531e67b9e737

  • SHA512

    a1c3d7bba5c0ec23e8e11f2acf1c2d007868fda2ffa79c79ad70fac22a82dd8981142cf21568f2ebfbcf923641436beb21262459ba9e60af00bc76745399c027

  • SSDEEP

    3072:5sq/nwhYJxJL6ZAdIaHKuiGSFq0T2ZLnBXnFq:3/wKJ/L6ZAWaHKRJkxZLnBVq

Score
10/10
gh0strataspackv2rat

Malware Config

Targets

    • Target

      fbc6d869084c6a465f9ef0c5ba4ef965_JaffaCakes118

    • Size

      114KB

    • MD5

      fbc6d869084c6a465f9ef0c5ba4ef965

    • SHA1

      8be135e24f31e0bee789ca4554438ce910c40f3e

    • SHA256

      34206ceaa0199d9fb2f170c8e8d34b6045478e10263adbf048a9531e67b9e737

    • SHA512

      a1c3d7bba5c0ec23e8e11f2acf1c2d007868fda2ffa79c79ad70fac22a82dd8981142cf21568f2ebfbcf923641436beb21262459ba9e60af00bc76745399c027

    • SSDEEP

      3072:5sq/nwhYJxJL6ZAdIaHKuiGSFq0T2ZLnBXnFq:3/wKJ/L6ZAWaHKRJkxZLnBVq

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks