gh0strat | c250e763c1ea57ea60f27a64daed359f267eed271c502ae9169a9415f6de38c4 | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...43.exe

windows7-x64

JaffaCakes...43.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_440d827bba91052bb63fb91dad395743
Size

107KB
Sample

250127-1v2s5swrev
MD5

440d827bba91052bb63fb91dad395743
SHA1

4ad53e5698d8f7824c08ce179e4e46878992fb40
SHA256

c250e763c1ea57ea60f27a64daed359f267eed271c502ae9169a9415f6de38c4
SHA512

5c0500b894bb7a861101d0e5f0a019fca44730afc7cf0f19ece6c82a5c01ccb062098f2a5dcdc02fee6f0520aad4779d94cff62a0fc67e3b383727b1c1e71627
SSDEEP

3072:k87SyGUmfY0+XHBkHDgHcgKb+TweEUK4Krf:p7SyGVfP+XyUHhqaweEUK4Wf

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_440d827bba91052bb63fb91dad395743.exe

Resource

win7-20240708-en

gh0strat discovery rat

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_440d827bba91052bb63fb91dad395743.exe

Resource

win10v2004-20241007-en

gh0strat discovery rat

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_440d827bba91052bb63fb91dad395743
- Size
  
  107KB
- MD5
  
  440d827bba91052bb63fb91dad395743
- SHA1
  
  4ad53e5698d8f7824c08ce179e4e46878992fb40
- SHA256
  
  c250e763c1ea57ea60f27a64daed359f267eed271c502ae9169a9415f6de38c4
- SHA512
  
  5c0500b894bb7a861101d0e5f0a019fca44730afc7cf0f19ece6c82a5c01ccb062098f2a5dcdc02fee6f0520aad4779d94cff62a0fc67e3b383727b1c1e71627
- SSDEEP
  
  3072:k87SyGUmfY0+XHBkHDgHcgKb+TweEUK4Krf:p7SyGVfP+XyUHhqaweEUK4Wf
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy