General
-
Target
5b8229e5c502062a8e333fad1a7a8c8f37661b3a4c1249baeae87ca575c61e81
-
Size
2.9MB
-
Sample
230822-lbgarsbd38
-
MD5
3129e3d16a64044fc945bfce6d255545
-
SHA1
e672e48bb6ccaa837f0c902bc44ca6f84d4564c7
-
SHA256
5b8229e5c502062a8e333fad1a7a8c8f37661b3a4c1249baeae87ca575c61e81
-
SHA512
079ecb7e8cb8fa77ffaf1008a8511e8025da186b5a4fea65be90135b3eed3487fb98b5846f6e9a24014cf6b8161fb2518a7049ca79ef5eccc96d8478b32bcf12
-
SSDEEP
49152:+CwsbCANnKXferL7Vwe/Gg0P+WhQNwVJBQ1orn/fO:5ws2ANnKXOaeOgmhQNwVJBQ1y
Static task
static1
Behavioral task
behavioral1
Sample
5b8229e5c502062a8e333fad1a7a8c8f37661b3a4c1249baeae87ca575c61e81.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
5b8229e5c502062a8e333fad1a7a8c8f37661b3a4c1249baeae87ca575c61e81
-
Size
2.9MB
-
MD5
3129e3d16a64044fc945bfce6d255545
-
SHA1
e672e48bb6ccaa837f0c902bc44ca6f84d4564c7
-
SHA256
5b8229e5c502062a8e333fad1a7a8c8f37661b3a4c1249baeae87ca575c61e81
-
SHA512
079ecb7e8cb8fa77ffaf1008a8511e8025da186b5a4fea65be90135b3eed3487fb98b5846f6e9a24014cf6b8161fb2518a7049ca79ef5eccc96d8478b32bcf12
-
SSDEEP
49152:+CwsbCANnKXferL7Vwe/Gg0P+WhQNwVJBQ1orn/fO:5ws2ANnKXOaeOgmhQNwVJBQ1y
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-