General
-
Target
845d83a263210344db70bc8d09066ac889b4b78cf9d18f3e0708f3393811e14c
-
Size
6.3MB
-
Sample
230816-l4gf8saa76
-
MD5
d493d916f129685c46cc52b2aafa76c0
-
SHA1
e6973ba7e01a8dd633f5070d5088acc96e630d36
-
SHA256
845d83a263210344db70bc8d09066ac889b4b78cf9d18f3e0708f3393811e14c
-
SHA512
853c8e86ab5117b27c93b2fb4e46d818a3fbf3d6f88c4fd4c232c378c34241d4d0d3a8a00646296f260d1726e2f1f11935a97ff2ec9bcaf4a4b770c0ed613e2d
-
SSDEEP
98304:CGdVyVT9nOgmhbuefS7peKOB3NLSiwbrM95+NTl:hWT9nO7Ye4pc3+rk5ql
Static task
static1
Behavioral task
behavioral1
Sample
845d83a263210344db70bc8d09066ac889b4b78cf9d18f3e0708f3393811e14c.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
845d83a263210344db70bc8d09066ac889b4b78cf9d18f3e0708f3393811e14c
-
Size
6.3MB
-
MD5
d493d916f129685c46cc52b2aafa76c0
-
SHA1
e6973ba7e01a8dd633f5070d5088acc96e630d36
-
SHA256
845d83a263210344db70bc8d09066ac889b4b78cf9d18f3e0708f3393811e14c
-
SHA512
853c8e86ab5117b27c93b2fb4e46d818a3fbf3d6f88c4fd4c232c378c34241d4d0d3a8a00646296f260d1726e2f1f11935a97ff2ec9bcaf4a4b770c0ed613e2d
-
SSDEEP
98304:CGdVyVT9nOgmhbuefS7peKOB3NLSiwbrM95+NTl:hWT9nO7Ye4pc3+rk5ql
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-