General

  • Target
    jaffacakes118_Trojan-GameThief.Win32.Magania.idxo.fd4af55e1f32d5586bad6e882f7cbf98
  • Size 144KB
  • Sample261006-vabtbsaz71
  • SHA256 d83706c549acf76796f1000c325376a7adef639f3d24fa955592a7c5488c11ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-GameThief.Win32.Magania.idxo.fd4af55e1f32d5586bad6e882f7cbf98
    • Size 144KB
    • SHA256 d83706c549acf76796f1000c325376a7adef639f3d24fa955592a7c5488c11ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0st RAT payload

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks