General
-
Target
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284
-
Size
177KB
-
Sample
221124-2ydq6ahe61
-
MD5
7562f2208fca8e51df007312cbc00ab1
-
SHA1
cfe1c6dba599820e1c3f9b55de1d52c3b6af68c7
-
SHA256
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284
-
SHA512
0f3308776b4fb70e40bc52d2e429d7eb7fc944694c0d8194364ff4bf596bac6ef733854c6050d4400df0f732723ab461f64c0ba9836240acba069aa8a005c543
-
SSDEEP
3072:ezZCwyESXpbo6aywuxuWuHZQEIplVwE7T2f46S7O+FI7aICssX:cyLs6ayFus7j7X
Static task
static1
Behavioral task
behavioral1
Sample
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284
-
Size
177KB
-
MD5
7562f2208fca8e51df007312cbc00ab1
-
SHA1
cfe1c6dba599820e1c3f9b55de1d52c3b6af68c7
-
SHA256
83577558b712f4a3a6b0023bb2f656ed1ecb652deea54c82a6c1c406412e6284
-
SHA512
0f3308776b4fb70e40bc52d2e429d7eb7fc944694c0d8194364ff4bf596bac6ef733854c6050d4400df0f732723ab461f64c0ba9836240acba069aa8a005c543
-
SSDEEP
3072:ezZCwyESXpbo6aywuxuWuHZQEIplVwE7T2f46S7O+FI7aICssX:cyLs6ayFus7j7X
Score10/10-
Gh0st RAT payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Sets DLL path for service in the registry
-
Sets file execution options in registry
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-