General
-
Target
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546
-
Size
176KB
-
Sample
221128-g2eseabg62
-
MD5
7c714e971bd8afd88af899253fd77f3d
-
SHA1
ca348c8d2215e807fec62c549d677b3e6292f2ce
-
SHA256
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546
-
SHA512
31effab420dabca0f3146f97b076804fbe6778126e4a7b3fc82d04f6ee0ac9144623932cc37a4a2de96440dba88b96637a5578189504a1785f24f250f89171ec
-
SSDEEP
3072:0cYcYKEzcW526y6hs6PhwtqrorsVlkTEIcy1O4F3JhMWIknqX5d+vIjc8UW:0cBYKEz557e2VroYoTU4JOWnS5d+v0cu
Behavioral task
behavioral1
Sample
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546
-
Size
176KB
-
MD5
7c714e971bd8afd88af899253fd77f3d
-
SHA1
ca348c8d2215e807fec62c549d677b3e6292f2ce
-
SHA256
4f6fd88c0b7af992e43b8372604c68208017f8119eab39f3f494f6d26e2fb546
-
SHA512
31effab420dabca0f3146f97b076804fbe6778126e4a7b3fc82d04f6ee0ac9144623932cc37a4a2de96440dba88b96637a5578189504a1785f24f250f89171ec
-
SSDEEP
3072:0cYcYKEzcW526y6hs6PhwtqrorsVlkTEIcy1O4F3JhMWIknqX5d+vIjc8UW:0cBYKEz557e2VroYoTU4JOWnS5d+v0cu
Score10/10-
Gh0st RAT payload
-
Blocklisted process makes network request
-
Sets DLL path for service in the registry
-
Deletes itself
-
Loads dropped DLL
-