General
-
Target
75c7df1e7c386aba8000ebd82a9dc72608349e25af63a42cb350d351e3a90869
-
Size
2.6MB
-
Sample
230614-ynrcqadc6x
-
MD5
f3bc901c15dd245327f740b22ed5f618
-
SHA1
723d0302b75820cdbb74229229989d2fae0e159f
-
SHA256
75c7df1e7c386aba8000ebd82a9dc72608349e25af63a42cb350d351e3a90869
-
SHA512
77bc5cd10377345c244c91dee98bec646cc9a440db0c419ac0f4db794d654643c1aa5c0c2aa9b30eb174b1ccd1318a8d6c2693d88988acd9f012862f38de9051
-
SSDEEP
24576:fMrINGHhvax4WwOAR++r+1UIMj7+yif2Y+yQiQBBQ9u:ErIN4k4/M+r+1Upj7+yifiyQpjuu
Behavioral task
behavioral1
Sample
75c7df1e7c386aba8000ebd82a9dc72608349e25af63a42cb350d351e3a90869.dll
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
75c7df1e7c386aba8000ebd82a9dc72608349e25af63a42cb350d351e3a90869
-
Size
2.6MB
-
MD5
f3bc901c15dd245327f740b22ed5f618
-
SHA1
723d0302b75820cdbb74229229989d2fae0e159f
-
SHA256
75c7df1e7c386aba8000ebd82a9dc72608349e25af63a42cb350d351e3a90869
-
SHA512
77bc5cd10377345c244c91dee98bec646cc9a440db0c419ac0f4db794d654643c1aa5c0c2aa9b30eb174b1ccd1318a8d6c2693d88988acd9f012862f38de9051
-
SSDEEP
24576:fMrINGHhvax4WwOAR++r+1UIMj7+yif2Y+yQiQBBQ9u:ErIN4k4/M+r+1Upj7+yifiyQpjuu
-
Gh0st RAT payload
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-