Overview

overview

10

Static

static

10

4497bda6ee...18.dll

windows7-x64

10

4497bda6ee...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4497bda6eec1cd98434ceee4a10671a4_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240714-gnzkna1fle

  • MD5

    4497bda6eec1cd98434ceee4a10671a4

  • SHA1

    8d15de1d1b4906720541a611b480663ebfb796e3

  • SHA256

    2907e04171d3fe8cfa6bd5391ed52ad9a6f94f7f02b7d601cb99e7991d992712

  • SHA512

    221c797a996acf0433731db2632c3185fef082ca405399684d5cd2d8e14c465c5701e17cfe5d5d7e92064a05b7fea5094c1419de8917a65ba4f8fba308187c15

  • SSDEEP

    1536:uTtLcWyeYd4//yEZc1GJf7/QP4uirytR5teeeeeeeeeeeeeeeeeeeeeeeeeeeeeH:uZTvnyEZiGJ7/QguirytR5g

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      4497bda6eec1cd98434ceee4a10671a4_JaffaCakes118

    • Size

      2.7MB

    • MD5

      4497bda6eec1cd98434ceee4a10671a4

    • SHA1

      8d15de1d1b4906720541a611b480663ebfb796e3

    • SHA256

      2907e04171d3fe8cfa6bd5391ed52ad9a6f94f7f02b7d601cb99e7991d992712

    • SHA512

      221c797a996acf0433731db2632c3185fef082ca405399684d5cd2d8e14c465c5701e17cfe5d5d7e92064a05b7fea5094c1419de8917a65ba4f8fba308187c15

    • SSDEEP

      1536:uTtLcWyeYd4//yEZc1GJf7/QP4uirytR5teeeeeeeeeeeeeeeeeeeeeeeeeeeeeH:uZTvnyEZiGJ7/QguirytR5g

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks