Overview

overview

10

Static

static

10

62af78eac3...18.exe

windows7-x64

10

62af78eac3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    62af78eac3638274b19915e00d6991f6_JaffaCakes118

  • Size

    122KB

  • Sample

    240722-ldly2azcqa

  • MD5

    62af78eac3638274b19915e00d6991f6

  • SHA1

    933d261e198346059b4e50cc0b9755c7b52d3cab

  • SHA256

    0660e8899a0ea72afcdd49fc548bea522e820c27f94d10f8751f243f9e620003

  • SHA512

    fb05b68c0cb3424e166a38a7ca7dd1674643f7683320f5f0756e6e0628e6df9ad9f5aa90844c8ccdd5156d19d973efecc623c41b3efad023e07c11639dbd504a

  • SSDEEP

    3072:1GGaO7x8fC8t52oj8+rKttHkoIIu6kfif20wN56:1GtON8aoQ+wKodjkqfXCo

Score
10/10
gh0stratrat

Malware Config

Targets

    • Target

      62af78eac3638274b19915e00d6991f6_JaffaCakes118

    • Size

      122KB

    • MD5

      62af78eac3638274b19915e00d6991f6

    • SHA1

      933d261e198346059b4e50cc0b9755c7b52d3cab

    • SHA256

      0660e8899a0ea72afcdd49fc548bea522e820c27f94d10f8751f243f9e620003

    • SHA512

      fb05b68c0cb3424e166a38a7ca7dd1674643f7683320f5f0756e6e0628e6df9ad9f5aa90844c8ccdd5156d19d973efecc623c41b3efad023e07c11639dbd504a

    • SSDEEP

      3072:1GGaO7x8fC8t52oj8+rKttHkoIIu6kfif20wN56:1GtON8aoQ+wKodjkqfXCo

    Score
    10/10
    gh0stratrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks