General
-
Target
7aafc60290b1ccec06c76fb8d06d7a7b.bin
-
Size
727KB
-
Sample
230331-b2zvpagb94
-
MD5
4867d043ff8e2ffcf48c95dd4f2286e6
-
SHA1
607424b7a83ef34cfc227e1b0f935222e48c2564
-
SHA256
21ab663e9da61cd102ad891939d76cf6be4ad06493dc62ed0a2cc1ae5ba4e74f
-
SHA512
eb145ac9d9248f9b20568c8d378a1b4b8fe433a22665b03e6d47672edfbdd4de602e33a1c26a54bf4dae222c3b8a792f10d953a3475fa42a40b8c06c1e3da0b3
-
SSDEEP
12288:ItpUcy+l4MORpmNa5TzLOg+yyz/c31tENUfLns/Bh+1RiU4gR3A:tcxpORINa53LOg+Rz/cgUfUf+1X4gi
Behavioral task
behavioral1
Sample
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524.exe
Resource
win7-20230220-en
Malware Config
Extracted
gh0strat
30.cmananan.com
Targets
-
-
Target
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524.exe
-
Size
884KB
-
MD5
7aafc60290b1ccec06c76fb8d06d7a7b
-
SHA1
260e5cdeba05c36d5edcf0d0dc280719eacfd611
-
SHA256
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524
-
SHA512
d82a97846f4b5af3612766c07c9327968816ba8fbca8e45f1cebd0d170d0e48e96f1a0f91456e95318e1bc6bcaf57a6a46eefcd010a34a1a6b67933336343692
-
SSDEEP
12288:UMrAn/yZdtZveNAGiVJvfGmuSjOUe6lF7GEfyu9btUi6kvJstvNAK3hx:xw/yZHZveNGJGfMFe6baeUPkxstvNAO
-
Gh0st RAT payload
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-