General
-
Target
811f4d41999f74d8d43ad15bca1ae828_JaffaCakes118
-
Size
51KB
-
Sample
241031-cfp9ssvrb1
-
MD5
811f4d41999f74d8d43ad15bca1ae828
-
SHA1
0d178426b3a7dfdc58530ab75736a022d6f2189f
-
SHA256
72ec34ebd451df15a97e84de221a4536d57fd18f4076104219fa2b582d05cfb1
-
SHA512
85c852f866c134948ea83d0a3dde00ac7c08bae95de84bf3f4b031e343a8ff1226b1a201010eedeb22edafa13c5dafaa4875b873f079f675df72e4093d1085c0
-
SSDEEP
1536:F6lc2von8LnW8dhL7KKixusEoCnPDadlHpSKoR4MlNYt0VNC:F8HQ8S8dhvxhNbYHArTktuNC
Static task
static1
Behavioral task
behavioral1
Sample
811f4d41999f74d8d43ad15bca1ae828_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
811f4d41999f74d8d43ad15bca1ae828_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
811f4d41999f74d8d43ad15bca1ae828_JaffaCakes118
-
Size
51KB
-
MD5
811f4d41999f74d8d43ad15bca1ae828
-
SHA1
0d178426b3a7dfdc58530ab75736a022d6f2189f
-
SHA256
72ec34ebd451df15a97e84de221a4536d57fd18f4076104219fa2b582d05cfb1
-
SHA512
85c852f866c134948ea83d0a3dde00ac7c08bae95de84bf3f4b031e343a8ff1226b1a201010eedeb22edafa13c5dafaa4875b873f079f675df72e4093d1085c0
-
SSDEEP
1536:F6lc2von8LnW8dhL7KKixusEoCnPDadlHpSKoR4MlNYt0VNC:F8HQ8S8dhvxhNbYHArTktuNC
Score10/10-
Gh0st RAT payload
-
Gh0strat family
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-