General
-
Target
b564eb670c6c12d1692d10ad60fe47e9fc4d207af97c6b5f6a82afa97808aa14
-
Size
2.1MB
-
Sample
230823-3a3k2shg4v
-
MD5
66e5ec091ab67abf1780be057f8e5a0f
-
SHA1
488b084640e46379269e99f069cde15d3ca7df9a
-
SHA256
b564eb670c6c12d1692d10ad60fe47e9fc4d207af97c6b5f6a82afa97808aa14
-
SHA512
ad649ee32cc2faa00cb7d10e0ee2a72b1bfebb3c1ccea684aec4591970fa9599f08bfe85d3b131f73b28e679bb60f972bfe9103cab59839aa6bde348aeea5aa4
-
SSDEEP
24576:bOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNLrWPoTnJGCNY1nJGCNYB+93dt:GHPkVOBTKLrWgtka+9Nt
Static task
static1
Behavioral task
behavioral1
Sample
b564eb670c6c12d1692d10ad60fe47e9fc4d207af97c6b5f6a82afa97808aa14.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
b564eb670c6c12d1692d10ad60fe47e9fc4d207af97c6b5f6a82afa97808aa14
-
Size
2.1MB
-
MD5
66e5ec091ab67abf1780be057f8e5a0f
-
SHA1
488b084640e46379269e99f069cde15d3ca7df9a
-
SHA256
b564eb670c6c12d1692d10ad60fe47e9fc4d207af97c6b5f6a82afa97808aa14
-
SHA512
ad649ee32cc2faa00cb7d10e0ee2a72b1bfebb3c1ccea684aec4591970fa9599f08bfe85d3b131f73b28e679bb60f972bfe9103cab59839aa6bde348aeea5aa4
-
SSDEEP
24576:bOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNLrWPoTnJGCNY1nJGCNYB+93dt:GHPkVOBTKLrWgtka+9Nt
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-