Overview

overview

10

Static

static

10

JaffaCakes...b0.dll

windows7-x64

10

JaffaCakes...b0.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4b2d3ddfcf3505eeef4d1d433254c9b0

  • Size

    74KB

  • Sample

    250304-e8kk5a1mt3

  • MD5

    4b2d3ddfcf3505eeef4d1d433254c9b0

  • SHA1

    0140245c13dec20f32ea1d3859f7d0d04bc364e1

  • SHA256

    63dd9cd75bf4fa9e11dea88a6eb2da7c88b48ee330801e6fc0573ed1279aaa1a

  • SHA512

    4479d54abf2b2433d2aa4eeed05fc5fb0750d4156a5e53e02dc497acc68258681e34351355f1274adb5a6b387d4379066e39639f83c1f8337632e15ebc94ee14

  • SSDEEP

    1536:3K1nFxLmztp0iqFwr7P/OCdK80cDJbfPnSC5CpCF/p:61nFdmNqFwrjmCAcJrPnSoCQFR

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_4b2d3ddfcf3505eeef4d1d433254c9b0

    • Size

      74KB

    • MD5

      4b2d3ddfcf3505eeef4d1d433254c9b0

    • SHA1

      0140245c13dec20f32ea1d3859f7d0d04bc364e1

    • SHA256

      63dd9cd75bf4fa9e11dea88a6eb2da7c88b48ee330801e6fc0573ed1279aaa1a

    • SHA512

      4479d54abf2b2433d2aa4eeed05fc5fb0750d4156a5e53e02dc497acc68258681e34351355f1274adb5a6b387d4379066e39639f83c1f8337632e15ebc94ee14

    • SSDEEP

      1536:3K1nFxLmztp0iqFwr7P/OCdK80cDJbfPnSC5CpCF/p:61nFdmNqFwrjmCAcJrPnSoCQFR

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks