General
-
Target
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231
-
Size
111KB
-
Sample
221204-v4wqlaef2y
-
MD5
ebd68e0fdafdec220107c6bb52030ec8
-
SHA1
056174e02e4a5a2b31582823f9195751c69d4183
-
SHA256
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231
-
SHA512
604df33b4a63f907055158cf5c3816c68e88b9131e6fa1fff5089ff5e43d9d0290101b54cb9e1ba595f5e647a981e411026f366cd9e161233f336b8900bc3fd6
-
SSDEEP
3072:qZ84ZsGA6P1XhkUVg8H8pd9Ti6mki1z3a:qZ8GsOtx1geCd9i6Vi1ba
Behavioral task
behavioral1
Sample
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231
-
Size
111KB
-
MD5
ebd68e0fdafdec220107c6bb52030ec8
-
SHA1
056174e02e4a5a2b31582823f9195751c69d4183
-
SHA256
584a50e1a60d5d4be5007094191759bedc809734d215d66c622c20b29144b231
-
SHA512
604df33b4a63f907055158cf5c3816c68e88b9131e6fa1fff5089ff5e43d9d0290101b54cb9e1ba595f5e647a981e411026f366cd9e161233f336b8900bc3fd6
-
SSDEEP
3072:qZ84ZsGA6P1XhkUVg8H8pd9Ti6mki1z3a:qZ8GsOtx1geCd9i6Vi1ba
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Deletes itself
-
Loads dropped DLL
-
Drops file in System32 directory
-