General

  • Target

    JaffaCakes118_4d114ae4ae166b56128fec8c2a67ae94

  • Size

    1003KB

  • Sample

    250304-njajaszmy7

  • MD5

    4d114ae4ae166b56128fec8c2a67ae94

  • SHA1

    e2c1c2bcc4e720b62a31d6c4bc77e1b683994481

  • SHA256

    99956cd96a220cdec3f3e7c65bf40e504d62b878733ec84cc4d6d0bc78d8741e

  • SHA512

    2967aec6b344ad2fe0f39e1738e2c50b7c7ef83b781f30cb4e7aa109d0085ff3e5555ac381b690eb95b1d0a2ab0b5de081edc6ddf969fbe85d2ce34296b3d086

  • SSDEEP

    24576:CMkCrY1oGhpx9Qq/TSNSWNb5/OtOQ+PUEgtMk:CMkCsoy0q/TSEIb1xQ+sErk

Malware Config

Targets

    • Target

      941破解58G宇宙加速器/941破解58G宇宙加速器.exe

    • Size

      1.5MB

    • MD5

      d5016ca94c3e3beac7631c6fa23c5b6e

    • SHA1

      3b74eaf4d380723accd848072ccbde71dcf58e93

    • SHA256

      2aef16116d3b4b82dcbc7a7b57a7ee06521656d36d396e0d865b5deb70a103aa

    • SHA512

      794aef7305195d8cc44e1c39978014673bcf21a22c2c435b4eff8a9cbc5d2a8db944ddd396cf5ba860b261fef6062b37be18c05b38be7931c9d50c59a35936ad

    • SSDEEP

      24576:2l3rNrwWD2ZmXJAcDEjrbnhlbh+GPdW5hvZdM/N5Xp:2l3prC05IfnhJhFeRap

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      941破解58G宇宙加速器/就是要破解网.url

    • Size

      79B

    • MD5

      1a2b8cb98ac60f13cefd12bea74cd576

    • SHA1

      c2a4efc5752a51a7b986ed70e502c007fd93b2b5

    • SHA256

      0918f501062e66881e68c625252b8e416433d2eda4e178d89381aa650ca743de

    • SHA512

      bd53460aed0d25a0aaae219205fd0e4ea7936b026a56a7e188bf3d46c65dc32bdb866b2719b883211481214e29a3efa01aaf3026590bc4a36f4bb4d85275df86

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks