Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...58.exe

windows7-x64

10

JaffaCakes...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_63b8b57a4997b0f8d28306121bae0958

  • Size

    130KB

  • Sample

    250311-g79vqsv1bx

  • MD5

    63b8b57a4997b0f8d28306121bae0958

  • SHA1

    44b65ec4319a5435077ee87d81418b8441ff9874

  • SHA256

    1467f371c36aee1d58c7bfc9f79592d81b233f3dd6e5b630b993fa05ba5e1422

  • SHA512

    245fe74efe43b3bedae2acc33ddb1470439e57de57898255848cff6b28234015f98dae83aee2af0a27c4231f2e312ad6cd9689a2bed60a7b9430135f3e21c43b

  • SSDEEP

    3072:imWR8PHcmhr8gQguD0gg4L6uOUsUAwVVm0TDmZ0c:imC8/cmhr8muA/oqUFvVm0TDw

Score
10/10
gh0stratdiscoverypersistencerat

Malware Config

Targets

    • Target

      JaffaCakes118_63b8b57a4997b0f8d28306121bae0958

    • Size

      130KB

    • MD5

      63b8b57a4997b0f8d28306121bae0958

    • SHA1

      44b65ec4319a5435077ee87d81418b8441ff9874

    • SHA256

      1467f371c36aee1d58c7bfc9f79592d81b233f3dd6e5b630b993fa05ba5e1422

    • SHA512

      245fe74efe43b3bedae2acc33ddb1470439e57de57898255848cff6b28234015f98dae83aee2af0a27c4231f2e312ad6cd9689a2bed60a7b9430135f3e21c43b

    • SSDEEP

      3072:imWR8PHcmhr8gQguD0gg4L6uOUsUAwVVm0TDmZ0c:imC8/cmhr8muA/oqUFvVm0TDw

    Score
    10/10
    gh0stratdiscoverypersistencerat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • Server Software Component: Terminal Services DLL

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks