Overview

overview

10

Static

static

10

JaffaCakes...75.exe

windows7-x64

10

JaffaCakes...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_42c3403268573f1d13b3b8aea96baf75

  • Size

    105KB

  • Sample

    250302-1gfczswshx

  • MD5

    42c3403268573f1d13b3b8aea96baf75

  • SHA1

    379a8b2864b31dbb364d24c4af42bb9d31d31958

  • SHA256

    80fee534ad7b76d1d695fb27b3e3083d177414cf6f32ca9c55ef542d71ce92e8

  • SHA512

    d4458d6215b666a878c7c921f9ce1a5164736463db6e78b565a51df90e317e351154a818cb98273c546118cc34d1ab8a3edb5b309ef92a98252bcad641a63d19

  • SSDEEP

    3072:Ia1WmS7mbySjzk9yYxtMBU8Ww0FsxXGks4:IaQmkmbySjzxmMW7w0GxXps4

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_42c3403268573f1d13b3b8aea96baf75

    • Size

      105KB

    • MD5

      42c3403268573f1d13b3b8aea96baf75

    • SHA1

      379a8b2864b31dbb364d24c4af42bb9d31d31958

    • SHA256

      80fee534ad7b76d1d695fb27b3e3083d177414cf6f32ca9c55ef542d71ce92e8

    • SHA512

      d4458d6215b666a878c7c921f9ce1a5164736463db6e78b565a51df90e317e351154a818cb98273c546118cc34d1ab8a3edb5b309ef92a98252bcad641a63d19

    • SSDEEP

      3072:Ia1WmS7mbySjzk9yYxtMBU8Ww0FsxXGks4:IaQmkmbySjzxmMW7w0GxXps4

    Score
    10/10
    gh0stratratdiscovery

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks