General
-
Target
047683c309c66f71ff311161528eaa28a4e1795fa05aee7ef96415154e867f1a
-
Size
3.3MB
-
Sample
230820-1ahvjahe22
-
MD5
a7ffc7788a2a6fc7ade635694dc99233
-
SHA1
ac675d68e26d3763f07bf49b8b62044411d00994
-
SHA256
047683c309c66f71ff311161528eaa28a4e1795fa05aee7ef96415154e867f1a
-
SHA512
4637cd5e9e365f276b19d783aca990e7f0b4c22171a3829e0a8394528b77920a328f9b926baf69bedf74b82361df4181c27f276e565058ff47f971d680096dba
-
SSDEEP
98304:aZJt4HIZOgmhTdA6XlQunnqGOaPSs1FtsSTyiUMBiD:QiIZO7ddAxAnqGOaPSs1FtsSHUMoD
Static task
static1
Behavioral task
behavioral1
Sample
047683c309c66f71ff311161528eaa28a4e1795fa05aee7ef96415154e867f1a.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
047683c309c66f71ff311161528eaa28a4e1795fa05aee7ef96415154e867f1a
-
Size
3.3MB
-
MD5
a7ffc7788a2a6fc7ade635694dc99233
-
SHA1
ac675d68e26d3763f07bf49b8b62044411d00994
-
SHA256
047683c309c66f71ff311161528eaa28a4e1795fa05aee7ef96415154e867f1a
-
SHA512
4637cd5e9e365f276b19d783aca990e7f0b4c22171a3829e0a8394528b77920a328f9b926baf69bedf74b82361df4181c27f276e565058ff47f971d680096dba
-
SSDEEP
98304:aZJt4HIZOgmhTdA6XlQunnqGOaPSs1FtsSTyiUMBiD:QiIZO7ddAxAnqGOaPSs1FtsSHUMoD
-
Gh0st RAT payload
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-