gh0strat | 449eb8e8720a4e4a54965cf49a639fe1343bdeeaa14e97d6c9950de9b3ae9e8f | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...df.dll

windows7-x64

JaffaCakes...df.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_484721c3727b8f2fde9632aae58babdf
Size

8.8MB
Sample

250303-wd693stzft
MD5

484721c3727b8f2fde9632aae58babdf
SHA1

ecafaa980c3d90baa1a398ddcfc3fbe26d5daea1
SHA256

449eb8e8720a4e4a54965cf49a639fe1343bdeeaa14e97d6c9950de9b3ae9e8f
SHA512

19bbdf117f0811302e1f87dd6ef8fd13e5355294e29752be6e649a541b2c5fe9dd5f3bfb09a2e8c8460b0532606cd09c5318a8a0f75f45b65d6a3605392537bb
SSDEEP

3072:BvBKS+26Y8zoz4EfZRzUKR/F4pEIbybZuwYc1UqhEEEEEEEEEEEEEEEEEEEEEEEP:N8tA1fYmFEX2ZuwFCT

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_484721c3727b8f2fde9632aae58babdf.dll

Resource

win7-20241010-en

gh0strat discovery rat

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_484721c3727b8f2fde9632aae58babdf.dll

Resource

win10v2004-20250217-en

gh0strat discovery rat

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_484721c3727b8f2fde9632aae58babdf
- Size
  
  8.8MB
- MD5
  
  484721c3727b8f2fde9632aae58babdf
- SHA1
  
  ecafaa980c3d90baa1a398ddcfc3fbe26d5daea1
- SHA256
  
  449eb8e8720a4e4a54965cf49a639fe1343bdeeaa14e97d6c9950de9b3ae9e8f
- SHA512
  
  19bbdf117f0811302e1f87dd6ef8fd13e5355294e29752be6e649a541b2c5fe9dd5f3bfb09a2e8c8460b0532606cd09c5318a8a0f75f45b65d6a3605392537bb
- SSDEEP
  
  3072:BvBKS+26Y8zoz4EfZRzUKR/F4pEIbybZuwYc1UqhEEEEEEEEEEEEEEEEEEEEEEEP:N8tA1fYmFEX2ZuwFCT
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy