gh0strat | 49dbab8d5daeadf74afc7867dd07b8e187ee8fd32ae4c1db50726ae7ae5d9808 | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...b1.dll

windows7-x64

JaffaCakes...b1.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_530d5ddc4311363bfdcaf23e068682b1
Size

90KB
Sample

250305-wlak3svvgx
MD5

530d5ddc4311363bfdcaf23e068682b1
SHA1

7098f9884b14922e67320f861427018b29d0d5a0
SHA256

49dbab8d5daeadf74afc7867dd07b8e187ee8fd32ae4c1db50726ae7ae5d9808
SHA512

eeb4809da93771fa41af7fd96d08f598ba8ae9fe472b20d8433b28afa1c1d6c07b07f37dce91094fd4c85aec97780a082177474c3e95a6e18608e6c61f58aeea
SSDEEP

1536:TsgUIelBVbYqQwNLwwMw6WS9eaZKacAFWfDxq1WM3YwnxPb:TsgUIelj19NUhw6vRKazFADxqlYwnxPb

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_530d5ddc4311363bfdcaf23e068682b1.dll

Resource

win7-20240903-en

gh0strat discovery rat

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_530d5ddc4311363bfdcaf23e068682b1.dll

Resource

win10v2004-20250217-en

gh0strat discovery rat

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_530d5ddc4311363bfdcaf23e068682b1
- Size
  
  90KB
- MD5
  
  530d5ddc4311363bfdcaf23e068682b1
- SHA1
  
  7098f9884b14922e67320f861427018b29d0d5a0
- SHA256
  
  49dbab8d5daeadf74afc7867dd07b8e187ee8fd32ae4c1db50726ae7ae5d9808
- SHA512
  
  eeb4809da93771fa41af7fd96d08f598ba8ae9fe472b20d8433b28afa1c1d6c07b07f37dce91094fd4c85aec97780a082177474c3e95a6e18608e6c61f58aeea
- SSDEEP
  
  1536:TsgUIelBVbYqQwNLwwMw6WS9eaZKacAFWfDxq1WM3YwnxPb:TsgUIelj19NUhw6vRKazFADxqlYwnxPb
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
- Drops file in Drivers directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy