gh0strat | 2a6255a295656f6732fd54bd573ad4a8d79e15ce2362f361c914e35913bf5f07 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...0b.exe

windows7-x64

JaffaCakes...0b.exe

windows10-2004-x64

3

Sharing

General

Target

JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b
Size

260KB
Sample

250303-frxpssxzcw
MD5

44f01a0ccbea5cc538039f1dc592dc0b
SHA1

8db8467fc3f2ee60237f842b418e6a482d3e0714
SHA256

2a6255a295656f6732fd54bd573ad4a8d79e15ce2362f361c914e35913bf5f07
SHA512

0c81fc89f86c5b9f20e66894c4490ce9780de3f26237b6cce493a3300ca689c1225e9880741707654a7ed30fdf6507723eb15782882ec1b8716f79bf1d2d14cf
SSDEEP

3072:oR+5rNUgD6dOvbSFVQCNzE4CfEglIBZs9VYpqMfyY3tLPwUl+HryFswxc59x9H57:p5ygefQSE7MHZsjYpqDY34LpXHaEdt

Score

10^/10

gh0strat discovery rat

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b.exe

Resource

win7-20240903-en

gh0strat discovery rat

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_44f01a0ccbea5cc538039f1dc592dc0b
- Size
  
  260KB
- MD5
  
  44f01a0ccbea5cc538039f1dc592dc0b
- SHA1
  
  8db8467fc3f2ee60237f842b418e6a482d3e0714
- SHA256
  
  2a6255a295656f6732fd54bd573ad4a8d79e15ce2362f361c914e35913bf5f07
- SHA512
  
  0c81fc89f86c5b9f20e66894c4490ce9780de3f26237b6cce493a3300ca689c1225e9880741707654a7ed30fdf6507723eb15782882ec1b8716f79bf1d2d14cf
- SSDEEP
  
  3072:oR+5rNUgD6dOvbSFVQCNzE4CfEglIBZs9VYpqMfyY3tLPwUl+HryFswxc59x9H57:p5ygefQSE7MHZsjYpqDY34LpXHaEdt
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

© 2018-2025

Terms | Privacy