Overview

overview

10

Static

static

10

231f50b839...18.exe

windows7-x64

10

231f50b839...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    231f50b83923b7c69c64b8f7956b2366_JaffaCakes118

  • Size

    127KB

  • Sample

    240703-vgyaxaygqr

  • MD5

    231f50b83923b7c69c64b8f7956b2366

  • SHA1

    1955c88ddbabe52f2944c731cbe0cbb5936d16ce

  • SHA256

    d243a211ebe831e10ca35baaa2d24b49d119837c6b496e17681817087ecf89e3

  • SHA512

    5eaf7f772087889effed7fd03aad9f5050aa5b1017a0a85bf25272b12943d6c0825c8138f3534b87baa707abf9aa9041a7adca62c2826b276949e32ed4732876

  • SSDEEP

    3072:c7CaO7x8fC8t52ojM+rKttHkoIIu6kfif20wNA:c7pON8aoQ+wKodjkqfXC

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      231f50b83923b7c69c64b8f7956b2366_JaffaCakes118

    • Size

      127KB

    • MD5

      231f50b83923b7c69c64b8f7956b2366

    • SHA1

      1955c88ddbabe52f2944c731cbe0cbb5936d16ce

    • SHA256

      d243a211ebe831e10ca35baaa2d24b49d119837c6b496e17681817087ecf89e3

    • SHA512

      5eaf7f772087889effed7fd03aad9f5050aa5b1017a0a85bf25272b12943d6c0825c8138f3534b87baa707abf9aa9041a7adca62c2826b276949e32ed4732876

    • SSDEEP

      3072:c7CaO7x8fC8t52ojM+rKttHkoIIu6kfif20wNA:c7pON8aoQ+wKodjkqfXC

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks