Overview

overview

10

Static

static

10

c816a49aca...18.dll

windows7-x64

10

c816a49aca...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c816a49acaefac7e7a272fe7a44d0237_JaffaCakes118

  • Size

    105KB

  • Sample

    240829-c5jhjszdlb

  • MD5

    c816a49acaefac7e7a272fe7a44d0237

  • SHA1

    a2474d95bffa6cf1e2d880806a692fa6175e3a24

  • SHA256

    c8154f65cdf718d43cbfa688e028c09288bf9b2dd68ce9dd78e9b30c4cdb2b5e

  • SHA512

    c6c714fd3335239c6a7ad41c80ba5ed8c1658862ade9a3ea3b78a41da33083ffa3a25e082832a17a10b238c534b6986961d63c2a3570687866d3872e49389f42

  • SSDEEP

    3072:Ve4d5yAw50Ok2PapYNFYGnvLzCI+SA5S3L:Ve4dQAw+D2PagpvPESAOL

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      c816a49acaefac7e7a272fe7a44d0237_JaffaCakes118

    • Size

      105KB

    • MD5

      c816a49acaefac7e7a272fe7a44d0237

    • SHA1

      a2474d95bffa6cf1e2d880806a692fa6175e3a24

    • SHA256

      c8154f65cdf718d43cbfa688e028c09288bf9b2dd68ce9dd78e9b30c4cdb2b5e

    • SHA512

      c6c714fd3335239c6a7ad41c80ba5ed8c1658862ade9a3ea3b78a41da33083ffa3a25e082832a17a10b238c534b6986961d63c2a3570687866d3872e49389f42

    • SSDEEP

      3072:Ve4d5yAw50Ok2PapYNFYGnvLzCI+SA5S3L:Ve4dQAw+D2PagpvPESAOL

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks