Overview

overview

10

Static

static

3

39fb451540...18.exe

windows7-x64

10

39fb451540...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39fb4515406c2ad135907422e9a8d4c2_JaffaCakes118

  • Size

    91KB

  • Sample

    240711-vfx9hsvhpj

  • MD5

    39fb4515406c2ad135907422e9a8d4c2

  • SHA1

    26b5dfd29c1eb2d94fdeb16be56a1f406411b613

  • SHA256

    c11a68bb59e1ce8c3eb405811057f31fdcb5df5ad0afe691ad320dff6af75194

  • SHA512

    7d18e2797d8214bb7119800809836b5a7c57cec0fe8cf780621fc128b7b1b5d906349ec1978fb8da966195ff238c20760e2d20ac27123e1deddf8e742e6474b6

  • SSDEEP

    1536:FRicmlkKXvbMOQa/62KDK+H7NVR1jwU/k+plcFzhjoeE+y2h+DBl48xgRYc15IKr:FscmlPbt/657NVR1jpuzCeE+Jh+du8Gz

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      39fb4515406c2ad135907422e9a8d4c2_JaffaCakes118

    • Size

      91KB

    • MD5

      39fb4515406c2ad135907422e9a8d4c2

    • SHA1

      26b5dfd29c1eb2d94fdeb16be56a1f406411b613

    • SHA256

      c11a68bb59e1ce8c3eb405811057f31fdcb5df5ad0afe691ad320dff6af75194

    • SHA512

      7d18e2797d8214bb7119800809836b5a7c57cec0fe8cf780621fc128b7b1b5d906349ec1978fb8da966195ff238c20760e2d20ac27123e1deddf8e742e6474b6

    • SSDEEP

      1536:FRicmlkKXvbMOQa/62KDK+H7NVR1jwU/k+plcFzhjoeE+y2h+DBl48xgRYc15IKr:FscmlPbt/657NVR1jpuzCeE+Jh+du8Gz

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks