General
-
Target
abd3f6293ad0f65a867e6a393588c05823981e0e334c3989bad41680ea358ca3
-
Size
149KB
-
Sample
221124-e67ymscf5t
-
MD5
bb45bd864b2d593e0d45e0709295ce74
-
SHA1
b36a1acaeb1a36eb0378b91b9e65a17bb0c012dc
-
SHA256
abd3f6293ad0f65a867e6a393588c05823981e0e334c3989bad41680ea358ca3
-
SHA512
58f669693f76567df2b4038cd5dbfd16d1b1c709b0c02697520df20685ff6687219915d4319197182ac70b8b1b3668a00dd5ba60224065dc014c1905396ee33e
-
SSDEEP
3072:9+RuHTNIv9cLXt1ZhT4M4uShr67iyVgxlqKWkQiqPNVgyqX2:kR0TN0qZD+qiq9bJPNyj
Static task
static1
Behavioral task
behavioral1
Sample
abd3f6293ad0f65a867e6a393588c05823981e0e334c3989bad41680ea358ca3.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
abd3f6293ad0f65a867e6a393588c05823981e0e334c3989bad41680ea358ca3
-
Size
149KB
-
MD5
bb45bd864b2d593e0d45e0709295ce74
-
SHA1
b36a1acaeb1a36eb0378b91b9e65a17bb0c012dc
-
SHA256
abd3f6293ad0f65a867e6a393588c05823981e0e334c3989bad41680ea358ca3
-
SHA512
58f669693f76567df2b4038cd5dbfd16d1b1c709b0c02697520df20685ff6687219915d4319197182ac70b8b1b3668a00dd5ba60224065dc014c1905396ee33e
-
SSDEEP
3072:9+RuHTNIv9cLXt1ZhT4M4uShr67iyVgxlqKWkQiqPNVgyqX2:kR0TN0qZD+qiq9bJPNyj
-
Gh0st RAT payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-