gh0strat | ec5173d7ace5c184707345f0257a98e1d1bd7b306c9a43f9be3d271d7754cf1b | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...ff.dll

windows7-x64

JaffaCakes...ff.dll

windows10-2004-x64

3

Sharing

General

Target

JaffaCakes118_4de02857155090988f1356e6ba1fc8ff
Size

39KB
Sample

250128-wwpsrazpek
MD5

4de02857155090988f1356e6ba1fc8ff
SHA1

479edb1217cf8f875bd209e654f0662c4a523a74
SHA256

ec5173d7ace5c184707345f0257a98e1d1bd7b306c9a43f9be3d271d7754cf1b
SHA512

094fe77c13dba7f1cfc48f2c1f5208ebdbbef1fa91bcaf8c9b3a47c9caf5da15614045e5882f8fba5049d478a78557ebd24db70bf59a273591b6a4c1dfc932cb
SSDEEP

768:AgO2PxPYdJE6aJ/tMfBSuvD93e0I/1jWF7lh67SfSHSk:AZ2PaE6eMBSuvAj6wrn

Score

10^/10

gh0strat discovery rat

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4de02857155090988f1356e6ba1fc8ff.dll

Resource

win7-20240903-en

gh0strat discovery rat

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4de02857155090988f1356e6ba1fc8ff.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_4de02857155090988f1356e6ba1fc8ff
- Size
  
  39KB
- MD5
  
  4de02857155090988f1356e6ba1fc8ff
- SHA1
  
  479edb1217cf8f875bd209e654f0662c4a523a74
- SHA256
  
  ec5173d7ace5c184707345f0257a98e1d1bd7b306c9a43f9be3d271d7754cf1b
- SHA512
  
  094fe77c13dba7f1cfc48f2c1f5208ebdbbef1fa91bcaf8c9b3a47c9caf5da15614045e5882f8fba5049d478a78557ebd24db70bf59a273591b6a4c1dfc932cb
- SSDEEP
  
  768:AgO2PxPYdJE6aJ/tMfBSuvD93e0I/1jWF7lh67SfSHSk:AZ2PaE6eMBSuvAj6wrn
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

© 2018-2025

Terms | Privacy