Overview

overview

10

Static

static

10

1ae7db3d33...18.dll

windows7-x64

10

1ae7db3d33...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1ae7db3d33b4b0a29e3dde24f6f005ce_JaffaCakes118

  • Size

    112KB

  • Sample

    240701-mahb4swakd

  • MD5

    1ae7db3d33b4b0a29e3dde24f6f005ce

  • SHA1

    71726f122e28aec693f110bfe8cca35f499d0a32

  • SHA256

    2b29ce3f6e55e7048435491ce88d13a6588015281c25287d27758fa2594a99f8

  • SHA512

    6cd7c31ea63dfc9d16c5dc10d7f43d6915fc127f94c027ba4a91d1472ddcd5df465fa3b9c2ec03fae292445278ec9f8362470a2deaf1629e8a9ae5ca71819b17

  • SSDEEP

    3072:Pp55xFbi/O8Y24akP5N6JttHEIIou8Rke5vi/Jx/:RhF2/fYbakhN67qI9tRkQa/T

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      1ae7db3d33b4b0a29e3dde24f6f005ce_JaffaCakes118

    • Size

      112KB

    • MD5

      1ae7db3d33b4b0a29e3dde24f6f005ce

    • SHA1

      71726f122e28aec693f110bfe8cca35f499d0a32

    • SHA256

      2b29ce3f6e55e7048435491ce88d13a6588015281c25287d27758fa2594a99f8

    • SHA512

      6cd7c31ea63dfc9d16c5dc10d7f43d6915fc127f94c027ba4a91d1472ddcd5df465fa3b9c2ec03fae292445278ec9f8362470a2deaf1629e8a9ae5ca71819b17

    • SSDEEP

      3072:Pp55xFbi/O8Y24akP5N6JttHEIIou8Rke5vi/Jx/:RhF2/fYbakhN67qI9tRkQa/T

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks