gh0strat | 3a17213ca0f2607bfdb6d5b08e1eb0231cf9a0bd99ea4d720ae291c5facac72e | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...a4.dll

windows7-x64

JaffaCakes...a4.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_4d33c51ee2f92ccbeead9372391f1ea4
Size

104KB
Sample

250304-n4p5gszsgt
MD5

4d33c51ee2f92ccbeead9372391f1ea4
SHA1

c1303634c183cd5f27a4918ad329530de0b6e024
SHA256

3a17213ca0f2607bfdb6d5b08e1eb0231cf9a0bd99ea4d720ae291c5facac72e
SHA512

323c8eb34c4817220b498b58ad3bce5b7981b2a8e5f8bbca4bf7820053351e3b409ba74071a99058055493131451c690e5c579e7edb5a31b75dbfb968a052c2a
SSDEEP

1536:h1WBOdCYW5wQWTrG4MVPnXIJicCL01fB70pSPA0h+YzuG/WIG2:bWuWoG4QPX1P0tB70MPA0h+YzuGuIG2

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_4d33c51ee2f92ccbeead9372391f1ea4.dll

Resource

win7-20240903-en

gh0strat discovery rat

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_4d33c51ee2f92ccbeead9372391f1ea4.dll

Resource

win10v2004-20250217-en

gh0strat discovery rat

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_4d33c51ee2f92ccbeead9372391f1ea4
- Size
  
  104KB
- MD5
  
  4d33c51ee2f92ccbeead9372391f1ea4
- SHA1
  
  c1303634c183cd5f27a4918ad329530de0b6e024
- SHA256
  
  3a17213ca0f2607bfdb6d5b08e1eb0231cf9a0bd99ea4d720ae291c5facac72e
- SHA512
  
  323c8eb34c4817220b498b58ad3bce5b7981b2a8e5f8bbca4bf7820053351e3b409ba74071a99058055493131451c690e5c579e7edb5a31b75dbfb968a052c2a
- SSDEEP
  
  1536:h1WBOdCYW5wQWTrG4MVPnXIJicCL01fB70pSPA0h+YzuG/WIG2:bWuWoG4QPX1P0tB70MPA0h+YzuGuIG2
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy