Overview

overview

10

Static

static

3

b28f0cd6bf...18.exe

windows7-x64

10

b28f0cd6bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b28f0cd6bf56bd6b337372884dc3a239_JaffaCakes118

  • Size

    260KB

  • Sample

    240821-h3sakazbjp

  • MD5

    b28f0cd6bf56bd6b337372884dc3a239

  • SHA1

    6e9c17c0fb77556abf70c0a9bb4dd7d8fcb3d212

  • SHA256

    ddbddeb5665bf65ffd49834700aa20f3c482d14d9cdedf4d48eaf8ecaf0fb0ff

  • SHA512

    fdfae6fc1a6ded1c37e99b79beab181674abc7d0be88da766fa3ee6705e74c2d37fa7aeedb8a671221a5d3b794d67db03acc56b112459f8f655bd7787a288fcb

  • SSDEEP

    6144:CKYFjWge0jvtvT3Ye77MIZsbuM7czFbF1R:+Wge0jVLYe7ITcX

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      b28f0cd6bf56bd6b337372884dc3a239_JaffaCakes118

    • Size

      260KB

    • MD5

      b28f0cd6bf56bd6b337372884dc3a239

    • SHA1

      6e9c17c0fb77556abf70c0a9bb4dd7d8fcb3d212

    • SHA256

      ddbddeb5665bf65ffd49834700aa20f3c482d14d9cdedf4d48eaf8ecaf0fb0ff

    • SHA512

      fdfae6fc1a6ded1c37e99b79beab181674abc7d0be88da766fa3ee6705e74c2d37fa7aeedb8a671221a5d3b794d67db03acc56b112459f8f655bd7787a288fcb

    • SSDEEP

      6144:CKYFjWge0jvtvT3Ye77MIZsbuM7czFbF1R:+Wge0jVLYe7ITcX

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks