General
-
Target
fafacde20582d467fd1f98b7fc69b35233f1d013542f4488937e7763e7c2e192
-
Size
2.8MB
-
Sample
230804-jk1pnaaa72
-
MD5
f08834a754ec6420f761356a999408e5
-
SHA1
2e430d55e601e1dc969e4f1c364d344b68f15fde
-
SHA256
fafacde20582d467fd1f98b7fc69b35233f1d013542f4488937e7763e7c2e192
-
SHA512
9f6647dd945eb374d75a300a1e1e1719940d5100eca7c4a9a395da36712bba26c3eab11ce6af2f1d04e673813a7b49641987e0fcfb6927aaf577f55ec96ede6e
-
SSDEEP
49152:c09XJt4HIN2H2tFvduySSnsHyjtk2MYC5GDPgfIKYpxqtYW+0Cc+:BZJt4HINy2LkSnsmtk2a2q/3Cb
Static task
static1
Behavioral task
behavioral1
Sample
fafacde20582d467fd1f98b7fc69b35233f1d013542f4488937e7763e7c2e192.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
fafacde20582d467fd1f98b7fc69b35233f1d013542f4488937e7763e7c2e192
-
Size
2.8MB
-
MD5
f08834a754ec6420f761356a999408e5
-
SHA1
2e430d55e601e1dc969e4f1c364d344b68f15fde
-
SHA256
fafacde20582d467fd1f98b7fc69b35233f1d013542f4488937e7763e7c2e192
-
SHA512
9f6647dd945eb374d75a300a1e1e1719940d5100eca7c4a9a395da36712bba26c3eab11ce6af2f1d04e673813a7b49641987e0fcfb6927aaf577f55ec96ede6e
-
SSDEEP
49152:c09XJt4HIN2H2tFvduySSnsHyjtk2MYC5GDPgfIKYpxqtYW+0Cc+:BZJt4HINy2LkSnsmtk2a2q/3Cb
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-