General
-
Target
df414811c035c585632cab9ac8aaed47989836030d81c97ed134b7475a9b5f32
-
Size
3.2MB
-
Sample
230627-xqyn5sfb64
-
MD5
7aa10783e36c0d9332c900e7c2a97512
-
SHA1
caac2b22ff67637ef5eca56c7941a42c11027836
-
SHA256
df414811c035c585632cab9ac8aaed47989836030d81c97ed134b7475a9b5f32
-
SHA512
6bee52923ec6cc21728c944c7b8ffd06fa0d4fc62269047f8683f43943d829e1b4a1ee622b5957ae420481b6447a198c91c1eab01f5b808994d3c8190e20a0d3
-
SSDEEP
24576:L6yyhs5+IW+aWFewwLa1wBfTur6Ut1spONYtSuMBdZiZ+g7+sJt/vsL4O6wts:kaq+aWFewwLaYTS6Ut1swNYA/A+sULM
Static task
static1
Behavioral task
behavioral1
Sample
df414811c035c585632cab9ac8aaed47989836030d81c97ed134b7475a9b5f32.exe
Resource
win7-20230621-en
Malware Config
Targets
-
-
Target
df414811c035c585632cab9ac8aaed47989836030d81c97ed134b7475a9b5f32
-
Size
3.2MB
-
MD5
7aa10783e36c0d9332c900e7c2a97512
-
SHA1
caac2b22ff67637ef5eca56c7941a42c11027836
-
SHA256
df414811c035c585632cab9ac8aaed47989836030d81c97ed134b7475a9b5f32
-
SHA512
6bee52923ec6cc21728c944c7b8ffd06fa0d4fc62269047f8683f43943d829e1b4a1ee622b5957ae420481b6447a198c91c1eab01f5b808994d3c8190e20a0d3
-
SSDEEP
24576:L6yyhs5+IW+aWFewwLa1wBfTur6Ut1spONYtSuMBdZiZ+g7+sJt/vsL4O6wts:kaq+aWFewwLaYTS6Ut1swNYA/A+sULM
-
Gh0st RAT payload
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-