General
-
Target
d3ec541e2bb47db384a9b1af642b39ab1e2542adb98c96e89babe6280292971f
-
Size
2.0MB
-
Sample
230821-gsxa4abc57
-
MD5
8f919df6316da9eeb79e22b2fb368db7
-
SHA1
c594ac500ad836338207e1bbceed498d34efa013
-
SHA256
d3ec541e2bb47db384a9b1af642b39ab1e2542adb98c96e89babe6280292971f
-
SHA512
80f671004a32845cf0461106798af860044264ee13c0bd529347e2ee86b5b0e15ce9813eb02c8b910f1d0a0c246aafed00a7e7e1662dd5aac6362a390f035329
-
SSDEEP
49152:wQZAdVyVT9n/Gg0P+WhoF4Ks3P5x2O04Ks3P5x2oK:ZGdVyVT9nOgmho4Ks3P5x2O04Ks3P5xq
Static task
static1
Behavioral task
behavioral1
Sample
d3ec541e2bb47db384a9b1af642b39ab1e2542adb98c96e89babe6280292971f.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
d3ec541e2bb47db384a9b1af642b39ab1e2542adb98c96e89babe6280292971f
-
Size
2.0MB
-
MD5
8f919df6316da9eeb79e22b2fb368db7
-
SHA1
c594ac500ad836338207e1bbceed498d34efa013
-
SHA256
d3ec541e2bb47db384a9b1af642b39ab1e2542adb98c96e89babe6280292971f
-
SHA512
80f671004a32845cf0461106798af860044264ee13c0bd529347e2ee86b5b0e15ce9813eb02c8b910f1d0a0c246aafed00a7e7e1662dd5aac6362a390f035329
-
SSDEEP
49152:wQZAdVyVT9n/Gg0P+WhoF4Ks3P5x2O04Ks3P5x2oK:ZGdVyVT9nOgmho4Ks3P5x2O04Ks3P5xq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-