General

  • Target

    8238d11130635be8b953bf2162049af1_JaffaCakes118

  • Size

    192KB

  • Sample

    241031-h441ra1qcz

  • MD5

    8238d11130635be8b953bf2162049af1

  • SHA1

    4865554bb9029a8739fc96924d490d34e74f95dd

  • SHA256

    e062ee418b3ef14b0d641bff4a8d5b0e961cb82da29230aeba9c6e2b1cfe064f

  • SHA512

    b5cb6676298763b6c774c7fff4db4976ed4c231f6958c672186f7fb1dbf87f56e671078dd68674475436c32484064c41de96daed78cd891c1eed467ddceea81c

  • SSDEEP

    3072:OQk3DH+bK+snWjvUJfQA3f2CaxQpLlLOdnHmvJR8oIUqtY7Ovih0iT0r:OQkTH+bpsnWjvo/v2lQpUHmrlHW

Score
10/10

Malware Config

Targets

    • Target

      8238d11130635be8b953bf2162049af1_JaffaCakes118

    • Size

      192KB

    • MD5

      8238d11130635be8b953bf2162049af1

    • SHA1

      4865554bb9029a8739fc96924d490d34e74f95dd

    • SHA256

      e062ee418b3ef14b0d641bff4a8d5b0e961cb82da29230aeba9c6e2b1cfe064f

    • SHA512

      b5cb6676298763b6c774c7fff4db4976ed4c231f6958c672186f7fb1dbf87f56e671078dd68674475436c32484064c41de96daed78cd891c1eed467ddceea81c

    • SSDEEP

      3072:OQk3DH+bK+snWjvUJfQA3f2CaxQpLlLOdnHmvJR8oIUqtY7Ovih0iT0r:OQkTH+bpsnWjvo/v2lQpUHmrlHW

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks