General
-
Target
09e97abe5a6f625a4e334851d69f049b56cb6bb9aaeef29816a2d9d40b93d5bf.exe
-
Size
1.5MB
-
Sample
230405-m5rt2adf56
-
MD5
ba69b3728cbbc3a8111a4e595b51363f
-
SHA1
c8b77e112bbfec763a7d723d68191d6517038640
-
SHA256
09e97abe5a6f625a4e334851d69f049b56cb6bb9aaeef29816a2d9d40b93d5bf
-
SHA512
2218df20bc99fdf3604efef6c7e1804b2b867f802c3e1f5e7a850c39279652b16a137285e35044b8c3883b0d05c0dbc96616f070b41bd50de0ef5b3296cf5153
-
SSDEEP
24576:dQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVnSnB3:dQZAdVyVT9n/Gg0P+WhoJnB3
Static task
static1
Behavioral task
behavioral1
Sample
09e97abe5a6f625a4e334851d69f049b56cb6bb9aaeef29816a2d9d40b93d5bf.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
09e97abe5a6f625a4e334851d69f049b56cb6bb9aaeef29816a2d9d40b93d5bf.exe
-
Size
1.5MB
-
MD5
ba69b3728cbbc3a8111a4e595b51363f
-
SHA1
c8b77e112bbfec763a7d723d68191d6517038640
-
SHA256
09e97abe5a6f625a4e334851d69f049b56cb6bb9aaeef29816a2d9d40b93d5bf
-
SHA512
2218df20bc99fdf3604efef6c7e1804b2b867f802c3e1f5e7a850c39279652b16a137285e35044b8c3883b0d05c0dbc96616f070b41bd50de0ef5b3296cf5153
-
SSDEEP
24576:dQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVnSnB3:dQZAdVyVT9n/Gg0P+WhoJnB3
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-