General

  • Target

    064637ce3a437698187e0c2c76048562_JaffaCakes118

  • Size

    144KB

  • Sample

    240623-qstdwascma

  • MD5

    064637ce3a437698187e0c2c76048562

  • SHA1

    f56dbc499161950019fc2fa16a422f68a65cc5bb

  • SHA256

    ed6fa1632043cb132f3a8116e4acd803c8164e1f1c075046bed6407d295191d2

  • SHA512

    fdac3686cf5db39ac152728446f917e16b00e0e0138f497dbf913240a3f6a7034daff9d5b959a52bb3c24fc51f2d29c637076a5f455482049d6026c7f1f2b6d7

  • SSDEEP

    3072:Zwx9wpgBX3HVmbszIl8qKMQIwDjHxluiFaJ0r+960c:Wx9wpCX3Hksz9qKr3uig0rka

Score
10/10

Malware Config

Targets

    • Target

      064637ce3a437698187e0c2c76048562_JaffaCakes118

    • Size

      144KB

    • MD5

      064637ce3a437698187e0c2c76048562

    • SHA1

      f56dbc499161950019fc2fa16a422f68a65cc5bb

    • SHA256

      ed6fa1632043cb132f3a8116e4acd803c8164e1f1c075046bed6407d295191d2

    • SHA512

      fdac3686cf5db39ac152728446f917e16b00e0e0138f497dbf913240a3f6a7034daff9d5b959a52bb3c24fc51f2d29c637076a5f455482049d6026c7f1f2b6d7

    • SSDEEP

      3072:Zwx9wpgBX3HVmbszIl8qKMQIwDjHxluiFaJ0r+960c:Wx9wpCX3Hksz9qKr3uig0rka

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

MITRE ATT&CK Matrix

Tasks