Overview

overview

10

Static

static

10

JaffaCakes...4f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9abd4a0b15ad11f719d8436b543a214f

  • Size

    937KB

  • Sample

    250405-q65dasx1cz

  • MD5

    9abd4a0b15ad11f719d8436b543a214f

  • SHA1

    8c2433df153c51fce295e865e21aa3d0bb268b94

  • SHA256

    2a34fbd1537024187733fe1ac595ea1e2ab10b33d94b3370d071d223a2135672

  • SHA512

    9a638ca3af9f53c8f040914f2238c4ad47426aaf6b16705cf916e61e4a6faf468391be4a2e8b8c247576eb2aa7d9edb413cd47f66c170a65497b6cdc0c35c658

  • SSDEEP

    3072:JKIO+FY3VDkdrIPizmawJB9HFkJEa1Q1qIpkuoZW/vkdD:dY3Y0PqgDpqEO4qOWZWnW

Score
10/10
gh0stratdiscoveryrat

Malware Config

Targets

    • Target

      JaffaCakes118_9abd4a0b15ad11f719d8436b543a214f

    • Size

      937KB

    • MD5

      9abd4a0b15ad11f719d8436b543a214f

    • SHA1

      8c2433df153c51fce295e865e21aa3d0bb268b94

    • SHA256

      2a34fbd1537024187733fe1ac595ea1e2ab10b33d94b3370d071d223a2135672

    • SHA512

      9a638ca3af9f53c8f040914f2238c4ad47426aaf6b16705cf916e61e4a6faf468391be4a2e8b8c247576eb2aa7d9edb413cd47f66c170a65497b6cdc0c35c658

    • SSDEEP

      3072:JKIO+FY3VDkdrIPizmawJB9HFkJEa1Q1qIpkuoZW/vkdD:dY3Y0PqgDpqEO4qOWZWnW

    Score
    10/10
    gh0stratdiscoveryrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks