gh0strat | 3a184abe84a7976e1250d9f255ee233e89d715829f08c623a5a193e2c1e9bcdf | Triage

Submit
Reports

Overview

overview

Static

static

JaffaCakes...0d.dll

windows7-x64

JaffaCakes...0d.dll

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_5d8b2e04f7c1b0987dcfab3547e4f90d
Size

102KB
Sample

250310-g5ralsvrw6
MD5

5d8b2e04f7c1b0987dcfab3547e4f90d
SHA1

78bc4ab46309610299c1a54c8c1cfb3ea8094393
SHA256

3a184abe84a7976e1250d9f255ee233e89d715829f08c623a5a193e2c1e9bcdf
SHA512

53b92f3a2a2c313cf611a418a0b00e3103f4ea9e40360e1ed2f7ad835143d81fea4fb7968c182a485299b000190a7a06cabc771c4942538a7914d36e56b8b201
SSDEEP

3072:8Ek69GRaQx846bWraHSYoHj6qmzM+tfPzD:8Ek60aQx81W6uHeHM+5

Score

10^/10

gh0strat discovery rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_5d8b2e04f7c1b0987dcfab3547e4f90d.dll

Resource

win7-20240729-en

gh0strat discovery rat

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_5d8b2e04f7c1b0987dcfab3547e4f90d.dll

Resource

win10v2004-20250217-en

gh0strat discovery rat

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5d8b2e04f7c1b0987dcfab3547e4f90d
- Size
  
  102KB
- MD5
  
  5d8b2e04f7c1b0987dcfab3547e4f90d
- SHA1
  
  78bc4ab46309610299c1a54c8c1cfb3ea8094393
- SHA256
  
  3a184abe84a7976e1250d9f255ee233e89d715829f08c623a5a193e2c1e9bcdf
- SHA512
  
  53b92f3a2a2c313cf611a418a0b00e3103f4ea9e40360e1ed2f7ad835143d81fea4fb7968c182a485299b000190a7a06cabc771c4942538a7914d36e56b8b201
- SSDEEP
  
  3072:8Ek69GRaQx846bWraHSYoHj6qmzM+tfPzD:8Ek60aQx81W6uHeHM+5
Score

10^/10

gh0strat discovery rat
- Gh0st RAT payload
- Gh0strat
  Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
  rat gh0strat
- Gh0strat family
  gh0strat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gh0stratdiscoveryrat

behavioral2

gh0stratdiscoveryrat

© 2018-2025

Terms | Privacy