General
-
Target
08bf2b0dd74f45a56d4a4b09db0d7b52cc0442ad4bbcdcb1f7db27f87c484520.exe
-
Size
2.3MB
-
Sample
230405-m5qa7sdf48
-
MD5
dc7be512c11cd153d1cd1575aee4ae15
-
SHA1
799ff1cbc7cd326b18d06d5aa01b6cfdefa6ed65
-
SHA256
08bf2b0dd74f45a56d4a4b09db0d7b52cc0442ad4bbcdcb1f7db27f87c484520
-
SHA512
59dfab2177790a51f9139fac9d8cc9b874e74e7af4c1178da172ed8933e786d619a656f3eaa171bfdcacabc267640b1a7cd03ab86bd55e1a8a4ca563caef2a1d
-
SSDEEP
24576:hCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHQ:hCwsbCANnKXferL7Vwe/Gg0P+Whb
Static task
static1
Behavioral task
behavioral1
Sample
08bf2b0dd74f45a56d4a4b09db0d7b52cc0442ad4bbcdcb1f7db27f87c484520.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
08bf2b0dd74f45a56d4a4b09db0d7b52cc0442ad4bbcdcb1f7db27f87c484520.exe
-
Size
2.3MB
-
MD5
dc7be512c11cd153d1cd1575aee4ae15
-
SHA1
799ff1cbc7cd326b18d06d5aa01b6cfdefa6ed65
-
SHA256
08bf2b0dd74f45a56d4a4b09db0d7b52cc0442ad4bbcdcb1f7db27f87c484520
-
SHA512
59dfab2177790a51f9139fac9d8cc9b874e74e7af4c1178da172ed8933e786d619a656f3eaa171bfdcacabc267640b1a7cd03ab86bd55e1a8a4ca563caef2a1d
-
SSDEEP
24576:hCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHQ:hCwsbCANnKXferL7Vwe/Gg0P+Whb
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-