General
-
Target
2a75f7cffee7e075a0a45ad044cc4ad39c8b8b656b29975f6679fe8194e19fc1
-
Size
3.9MB
-
Sample
230529-m7y15abd96
-
MD5
ae7001470fbdf06d68150edcb4482e45
-
SHA1
c5ef18f9c78541b44c82ee444a76192120e181d5
-
SHA256
2a75f7cffee7e075a0a45ad044cc4ad39c8b8b656b29975f6679fe8194e19fc1
-
SHA512
26f8b81b6cd45e23fb38de0ab2ba68eb4b034ef0758fefcc2c7b14a87839bf8f5f231f028d49c4b49c238a0a7a16054418120fd173a3caee238be2e31dfa56ec
-
SSDEEP
98304:04o3WXmh+fxLkog2GyCN5t9TbwoalozL3uRS5VWngBS5mH:nUgkog2GyCNBTEnlO3u
Static task
static1
Behavioral task
behavioral1
Sample
2a75f7cffee7e075a0a45ad044cc4ad39c8b8b656b29975f6679fe8194e19fc1.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
2a75f7cffee7e075a0a45ad044cc4ad39c8b8b656b29975f6679fe8194e19fc1
-
Size
3.9MB
-
MD5
ae7001470fbdf06d68150edcb4482e45
-
SHA1
c5ef18f9c78541b44c82ee444a76192120e181d5
-
SHA256
2a75f7cffee7e075a0a45ad044cc4ad39c8b8b656b29975f6679fe8194e19fc1
-
SHA512
26f8b81b6cd45e23fb38de0ab2ba68eb4b034ef0758fefcc2c7b14a87839bf8f5f231f028d49c4b49c238a0a7a16054418120fd173a3caee238be2e31dfa56ec
-
SSDEEP
98304:04o3WXmh+fxLkog2GyCN5t9TbwoalozL3uRS5VWngBS5mH:nUgkog2GyCNBTEnlO3u
-
Gh0st RAT payload
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-