Overview

overview

10

Static

static

10

8208f36f64...18.dll

windows7-x64

10

8208f36f64...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8208f36f647c5decffaa56a2a8141df7_JaffaCakes118

  • Size

    152KB

  • Sample

    240801-2qy25azhmj

  • MD5

    8208f36f647c5decffaa56a2a8141df7

  • SHA1

    0fdba1242ceb4fe65a2f7aae98115c82774b80f1

  • SHA256

    86c654e7b5a16d52df888b1c40bb1f4eb26e7ecbd417fa23ae7595e26948e841

  • SHA512

    42b8cbcbf824a7a89d375f73c73f2bb47547a816e5bac09290fc10bc977bb469ac2336337bb43442e55115104113ea70465ce24fccabc13a78360dd8ada2b4ea

  • SSDEEP

    3072:dHZiUnFs6KGEwoie2AVjqU1s02TBftXdR6gzf6BT7Dm5:d4UFs6KVOe1qAr2TBlXdR6e6k

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      8208f36f647c5decffaa56a2a8141df7_JaffaCakes118

    • Size

      152KB

    • MD5

      8208f36f647c5decffaa56a2a8141df7

    • SHA1

      0fdba1242ceb4fe65a2f7aae98115c82774b80f1

    • SHA256

      86c654e7b5a16d52df888b1c40bb1f4eb26e7ecbd417fa23ae7595e26948e841

    • SHA512

      42b8cbcbf824a7a89d375f73c73f2bb47547a816e5bac09290fc10bc977bb469ac2336337bb43442e55115104113ea70465ce24fccabc13a78360dd8ada2b4ea

    • SSDEEP

      3072:dHZiUnFs6KGEwoie2AVjqU1s02TBftXdR6gzf6BT7Dm5:d4UFs6KVOe1qAr2TBlXdR6e6k

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks