Overview

overview

10

Static

static

10

b249d0cba3...18.exe

windows7-x64

10

b249d0cba3...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b249d0cba30eb98c9a1049dd6990d920_JaffaCakes118

  • Size

    124KB

  • Sample

    240821-gcjp3awcjr

  • MD5

    b249d0cba30eb98c9a1049dd6990d920

  • SHA1

    7421bf9b65ce5c081c20a711d731d2a40db50b18

  • SHA256

    65243d430604db9e572d2891d9a03fad7cb35bec5b90a40e435ef4fe715fa13a

  • SHA512

    b776a8f8085114fcba40e2966f4e61ffb4e19496408d66267f2bc6fcbbd736f8cdf59e06035c693079dc716c5acdcbce6979a849579d7011d4531731b36071e9

  • SSDEEP

    3072:f0QPj4ApntEdqj+LrGEgjSCb0l3CIkCVD0+:s69SKHS8yyIks1

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      b249d0cba30eb98c9a1049dd6990d920_JaffaCakes118

    • Size

      124KB

    • MD5

      b249d0cba30eb98c9a1049dd6990d920

    • SHA1

      7421bf9b65ce5c081c20a711d731d2a40db50b18

    • SHA256

      65243d430604db9e572d2891d9a03fad7cb35bec5b90a40e435ef4fe715fa13a

    • SHA512

      b776a8f8085114fcba40e2966f4e61ffb4e19496408d66267f2bc6fcbbd736f8cdf59e06035c693079dc716c5acdcbce6979a849579d7011d4531731b36071e9

    • SSDEEP

      3072:f0QPj4ApntEdqj+LrGEgjSCb0l3CIkCVD0+:s69SKHS8yyIks1

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks