General
-
Target
02ee31e2e80cebab48aa3035137f321577d0865410d03aedcdc52428222e41e8
-
Size
3.2MB
-
Sample
230626-zrh17abh46
-
MD5
4aa32be538ec767385e6ed15fb8780bc
-
SHA1
0944171c34d6582f402f265c533f4bd962cba035
-
SHA256
02ee31e2e80cebab48aa3035137f321577d0865410d03aedcdc52428222e41e8
-
SHA512
b43a7d06bd2c830d2d8690eec6593a48fe867f8cfdced41f4d668a214b74f7d563da424ab6ff7c1350ab65c2313ec633f1fb31f83b389331f54cc2432d7778f7
-
SSDEEP
24576:NOfi6IW+aWFewwLa1wBfTur6Ut1spONYtSuMBdZiZ+g7+sJt/vsL4O6wts:Y3+aWFewwLaYTS6Ut1swNYA/A+sULM
Static task
static1
Behavioral task
behavioral1
Sample
02ee31e2e80cebab48aa3035137f321577d0865410d03aedcdc52428222e41e8.exe
Resource
win7-20230621-en
Malware Config
Targets
-
-
Target
02ee31e2e80cebab48aa3035137f321577d0865410d03aedcdc52428222e41e8
-
Size
3.2MB
-
MD5
4aa32be538ec767385e6ed15fb8780bc
-
SHA1
0944171c34d6582f402f265c533f4bd962cba035
-
SHA256
02ee31e2e80cebab48aa3035137f321577d0865410d03aedcdc52428222e41e8
-
SHA512
b43a7d06bd2c830d2d8690eec6593a48fe867f8cfdced41f4d668a214b74f7d563da424ab6ff7c1350ab65c2313ec633f1fb31f83b389331f54cc2432d7778f7
-
SSDEEP
24576:NOfi6IW+aWFewwLa1wBfTur6Ut1spONYtSuMBdZiZ+g7+sJt/vsL4O6wts:Y3+aWFewwLaYTS6Ut1swNYA/A+sULM
-
Gh0st RAT payload
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-