General
-
Target
0e0e9a99f7167d778777acdb31c4fc86f9bda48864186e5a7e4ab99a401670d3
-
Size
3.5MB
-
Sample
230822-b4ebrshd58
-
MD5
f35e054ad13ce60c27cdfd35cf328127
-
SHA1
a5e4c3bbfd330f4fac5ed9cc1882b957029edb80
-
SHA256
0e0e9a99f7167d778777acdb31c4fc86f9bda48864186e5a7e4ab99a401670d3
-
SHA512
5529b5407965d2f37f887351289a23279a165390c23177cf503dc81f945ca75f955e42479749d7ce4570c9dacde47521326a3f2d8cf08f88116e02c5fbea7655
-
SSDEEP
49152:JCwsbCANnKXferL7Vwe/Gg0P+WhcTxh26KxO+Uqg3X06H6X:kws2ANnKXOaeOgmhcHEO+h6H6X
Static task
static1
Behavioral task
behavioral1
Sample
0e0e9a99f7167d778777acdb31c4fc86f9bda48864186e5a7e4ab99a401670d3.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
0e0e9a99f7167d778777acdb31c4fc86f9bda48864186e5a7e4ab99a401670d3
-
Size
3.5MB
-
MD5
f35e054ad13ce60c27cdfd35cf328127
-
SHA1
a5e4c3bbfd330f4fac5ed9cc1882b957029edb80
-
SHA256
0e0e9a99f7167d778777acdb31c4fc86f9bda48864186e5a7e4ab99a401670d3
-
SHA512
5529b5407965d2f37f887351289a23279a165390c23177cf503dc81f945ca75f955e42479749d7ce4570c9dacde47521326a3f2d8cf08f88116e02c5fbea7655
-
SSDEEP
49152:JCwsbCANnKXferL7Vwe/Gg0P+WhcTxh26KxO+Uqg3X06H6X:kws2ANnKXOaeOgmhcHEO+h6H6X
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-