Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

JaffaCakes...c0.dll

windows7-x64

10

JaffaCakes...c0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_368be2cd47c454d01d760a3d076a2bc0

  • Size

    34KB

  • Sample

    250301-eedwgszmw7

  • MD5

    368be2cd47c454d01d760a3d076a2bc0

  • SHA1

    1a2cbeafcbb59f5090c390f0b31894045482df7f

  • SHA256

    ff6f096ca25efa81364044e8a36031d41cccbfa9038126cd26ba351101cd553e

  • SHA512

    fae41ce85996a8fd38fa2c9778bf80a36bb008ea37525da822f549b90394f95a1c377e7947cce9c91a1ac0b8cb6cd79bde2f4b19eab174569f29ce3ca9755f08

  • SSDEEP

    768:4B2kqWZvAuYZUFXwUFq8u8T5zaKdLihP5RfoT+2J7l:4B2aGUZNqF8T5zHLihP5Rfoi6

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_368be2cd47c454d01d760a3d076a2bc0

    • Size

      34KB

    • MD5

      368be2cd47c454d01d760a3d076a2bc0

    • SHA1

      1a2cbeafcbb59f5090c390f0b31894045482df7f

    • SHA256

      ff6f096ca25efa81364044e8a36031d41cccbfa9038126cd26ba351101cd553e

    • SHA512

      fae41ce85996a8fd38fa2c9778bf80a36bb008ea37525da822f549b90394f95a1c377e7947cce9c91a1ac0b8cb6cd79bde2f4b19eab174569f29ce3ca9755f08

    • SSDEEP

      768:4B2kqWZvAuYZUFXwUFq8u8T5zaKdLihP5RfoT+2J7l:4B2aGUZNqF8T5zHLihP5Rfoi6

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks