Overview

overview

10

Static

static

10

25252867ef...18.dll

windows7-x64

10

25252867ef...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25252867ef61fdee88ec325bd504d153_JaffaCakes118

  • Size

    103KB

  • Sample

    240704-jhsahatanc

  • MD5

    25252867ef61fdee88ec325bd504d153

  • SHA1

    30e0d05ddd360e6b114c914f5fe02665987e89b9

  • SHA256

    3f77f87887a8383aec707cbd5ae221ae4b0203eeeabb91a00fa97061c8af89e2

  • SHA512

    7fc78160ed0cfd605e22c4fedf446dbd1be925892a349b83cf7df9028de0e17aa2779a259ea73706059b4b51832f91c72ee9fc42a2d47621a9cee75a89759317

  • SSDEEP

    3072:iydn47Og/PVl2L8CtTJX11kYahRgRNiK1u:iydn46gHVcLdL1ZIeTiKo

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      25252867ef61fdee88ec325bd504d153_JaffaCakes118

    • Size

      103KB

    • MD5

      25252867ef61fdee88ec325bd504d153

    • SHA1

      30e0d05ddd360e6b114c914f5fe02665987e89b9

    • SHA256

      3f77f87887a8383aec707cbd5ae221ae4b0203eeeabb91a00fa97061c8af89e2

    • SHA512

      7fc78160ed0cfd605e22c4fedf446dbd1be925892a349b83cf7df9028de0e17aa2779a259ea73706059b4b51832f91c72ee9fc42a2d47621a9cee75a89759317

    • SSDEEP

      3072:iydn47Og/PVl2L8CtTJX11kYahRgRNiK1u:iydn46gHVcLdL1ZIeTiKo

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks