General
-
Target
d986ef8283fda24f7bc5677e21048a058b85838948ec3b6d17d3ec32d9ba4426
-
Size
375KB
-
Sample
220923-g1h4fahcdn
-
MD5
01f50394af09a978e0818b1c12e0cd64
-
SHA1
21162ef465817c3903995300aa370bad481d55a1
-
SHA256
d986ef8283fda24f7bc5677e21048a058b85838948ec3b6d17d3ec32d9ba4426
-
SHA512
bf609ee2ef3948b50128f7a41b577e92c35bb2ccd1c8338294dbda68c325534d3667ee660dbf2c3e85519f3e59229e88ea0a0be751324609a64f0c9455793ea2
-
SSDEEP
6144:ev5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:e4VOiF1WD7kE1dTYOi8V5u23zmWFy4
Static task
static1
Malware Config
Targets
-
-
Target
d986ef8283fda24f7bc5677e21048a058b85838948ec3b6d17d3ec32d9ba4426
-
Size
375KB
-
MD5
01f50394af09a978e0818b1c12e0cd64
-
SHA1
21162ef465817c3903995300aa370bad481d55a1
-
SHA256
d986ef8283fda24f7bc5677e21048a058b85838948ec3b6d17d3ec32d9ba4426
-
SHA512
bf609ee2ef3948b50128f7a41b577e92c35bb2ccd1c8338294dbda68c325534d3667ee660dbf2c3e85519f3e59229e88ea0a0be751324609a64f0c9455793ea2
-
SSDEEP
6144:ev5zQJVb5p72cHF1ybDFwekh212KhvwIb759QOaBjpaVRPu23E2rJmWjFc94:e4VOiF1WD7kE1dTYOi8V5u23zmWFy4
-
Gh0st RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-