Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-01-2025 19:46
General
-
Target
JaffaCakes118_43172b945d09f5a8ca306a9da6ade715.exe
-
Size
111KB
-
MD5
43172b945d09f5a8ca306a9da6ade715
-
SHA1
8ea952680a7450fce59f3d8ee99a474fcba5eee5
-
SHA256
a3fed8b1621582e3b5641b4dddcc9862b1d4b1b62fd94ef1c02e2e946337cb07
-
SHA512
ed13bf3de916e123cf034315a7872aec6a2f95433a79aa30b2cddfd42c8aba7e4f2108286c1ae478eeda4544b7437813bebfef29ec9e6db7ec508e0b46000e26
-
SSDEEP
3072:MqvHvJOAA0N2mcAFrREGrWhlr2z4fpTjkN7HkyDUJnW:MqvHIAA02mcKRLrEy4cNb1oJnW
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 2 IoCs
-
Gh0strat
Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
-
Gh0strat family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_43172b945d09f5a8ca306a9da6ade715.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_43172b945d09f5a8ca306a9da6ade715.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
116KB