gh0strat | edd0c021b3a279fb784385c8c1c5a97a50d19740b4ae9b6a2fff999caf8ec401 | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...1a.exe

windows7-x64

JaffaCakes...1a.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_3df9f6d2a1df858bc8e37a8fddde651a
Size

122KB
Sample

250302-fgk81svqz3
MD5

3df9f6d2a1df858bc8e37a8fddde651a
SHA1

0f842481ee685df0668444c38f0b9cf09cfe4a16
SHA256

edd0c021b3a279fb784385c8c1c5a97a50d19740b4ae9b6a2fff999caf8ec401
SHA512

8b7f63794b0c9656b6eb1ea141101427c65bfbd1acf07f4264b8bcf86e8d004f202577e0d8549bfd0c6213a2ab6a8ad7ed46a61a3a195892df0e61a36753be4d
SSDEEP

3072:RUsFn6ybpbeySCHJ/l0ch25QrO2/pZKhdp8USZe1FDyTZT3gJR:2st6ybpbeySCJ6i25uOeZ4pNGQF2NEJR

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_3df9f6d2a1df858bc8e37a8fddde651a.exe

Resource

win7-20250207-en

gh0strat discovery rat

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_3df9f6d2a1df858bc8e37a8fddde651a.exe

Resource

win10v2004-20250217-en

gh0strat discovery rat

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_3df9f6d2a1df858bc8e37a8fddde651a
- Size
  
  122KB
- MD5
  
  3df9f6d2a1df858bc8e37a8fddde651a
- SHA1
  
  0f842481ee685df0668444c38f0b9cf09cfe4a16
- SHA256
  
  edd0c021b3a279fb784385c8c1c5a97a50d19740b4ae9b6a2fff999caf8ec401
- SHA512
  
  8b7f63794b0c9656b6eb1ea141101427c65bfbd1acf07f4264b8bcf86e8d004f202577e0d8549bfd0c6213a2ab6a8ad7ed46a61a3a195892df0e61a36753be4d
- SSDEEP
  
  3072:RUsFn6ybpbeySCHJ/l0ch25QrO2/pZKhdp8USZe1FDyTZT3gJR:2st6ybpbeySCJ6i25uOeZ4pNGQF2NEJR
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy