Overview

overview

10

Static

static

10

b036abd6c1...18.dll

windows7-x64

10

b036abd6c1...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b036abd6c114c465264156da8b83dbe6_JaffaCakes118

  • Size

    139KB

  • Sample

    240820-wcpnmsvfqc

  • MD5

    b036abd6c114c465264156da8b83dbe6

  • SHA1

    c07d55e6ae07586848935b44027d87cb384f5552

  • SHA256

    10177a232a2647b9397af03cfb4dbcda2e37e5b2f0363d5c634cb708e5c57b52

  • SHA512

    4fe211a9d6eac08f87f838653459e24ca8bf451b471ae44f4f9936a997928621f02a48aee0c2c158d034769d0a730e359ab00ab2226c098b7a224cf5f565b8dd

  • SSDEEP

    3072:87RRHMqc8LNEXlcxdJBAJ6da+il/A5G9rlav9qSQY:wRGKXrs59BkqQ

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      b036abd6c114c465264156da8b83dbe6_JaffaCakes118

    • Size

      139KB

    • MD5

      b036abd6c114c465264156da8b83dbe6

    • SHA1

      c07d55e6ae07586848935b44027d87cb384f5552

    • SHA256

      10177a232a2647b9397af03cfb4dbcda2e37e5b2f0363d5c634cb708e5c57b52

    • SHA512

      4fe211a9d6eac08f87f838653459e24ca8bf451b471ae44f4f9936a997928621f02a48aee0c2c158d034769d0a730e359ab00ab2226c098b7a224cf5f565b8dd

    • SSDEEP

      3072:87RRHMqc8LNEXlcxdJBAJ6da+il/A5G9rlav9qSQY:wRGKXrs59BkqQ

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks