Overview

overview

10

Static

static

10

JaffaCakes...00.dll

windows7-x64

10

JaffaCakes...00.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_5d0628799aafc0acd6b532e8eb63eb00

  • Size

    110KB

  • Sample

    250310-exycvaswht

  • MD5

    5d0628799aafc0acd6b532e8eb63eb00

  • SHA1

    aaa3b055718db496305534c979d6d7b9ea6f1745

  • SHA256

    0e4eee03fb594bc4eef7ac1e8fde937be2c61ca769a478a478b5a6e5751d8f85

  • SHA512

    026faa78db6c231a08ba970dfa564edf0ed2da0b350bc34fa9d838c1a7e572785901b61aab02ef4c5edb25fb03132cd0ec99f82d9b72098fd5f9f70cd39a67a7

  • SSDEEP

    1536:w/Lc3nCWt45PtINvbc+b613dJuRci/rPfBiE/uP2ow7hJFXscwzTWk+A:GL0HCycaaNJuRh/DBiE/3bNJFXscwzF

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_5d0628799aafc0acd6b532e8eb63eb00

    • Size

      110KB

    • MD5

      5d0628799aafc0acd6b532e8eb63eb00

    • SHA1

      aaa3b055718db496305534c979d6d7b9ea6f1745

    • SHA256

      0e4eee03fb594bc4eef7ac1e8fde937be2c61ca769a478a478b5a6e5751d8f85

    • SHA512

      026faa78db6c231a08ba970dfa564edf0ed2da0b350bc34fa9d838c1a7e572785901b61aab02ef4c5edb25fb03132cd0ec99f82d9b72098fd5f9f70cd39a67a7

    • SSDEEP

      1536:w/Lc3nCWt45PtINvbc+b613dJuRci/rPfBiE/uP2ow7hJFXscwzTWk+A:GL0HCycaaNJuRh/DBiE/3bNJFXscwzF

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks