General
-
Target
271a66b325488a92ed69c0131812d6979c041b6f373b9d56075aee577d38eb69
-
Size
1.8MB
-
Sample
230823-whbnzaga7v
-
MD5
d1847af389f9b1abc214a109ea51a8df
-
SHA1
e2416fee8d4021c19f353926f4536fd7cee45035
-
SHA256
271a66b325488a92ed69c0131812d6979c041b6f373b9d56075aee577d38eb69
-
SHA512
6fddedababfd0b672552d9e6248d699313dd81c0e0d20cec741a02aa732d473d274b2462925ec5ee83aaa3f3f7db9c65e1900c3c8606349661cbe076e219fb34
-
SSDEEP
49152:n09XJt4HIN2H2tFvduySvpeIZPItx2apeapelI:0ZJt4HINy2LksRtUvlI
Static task
static1
Behavioral task
behavioral1
Sample
271a66b325488a92ed69c0131812d6979c041b6f373b9d56075aee577d38eb69.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
271a66b325488a92ed69c0131812d6979c041b6f373b9d56075aee577d38eb69
-
Size
1.8MB
-
MD5
d1847af389f9b1abc214a109ea51a8df
-
SHA1
e2416fee8d4021c19f353926f4536fd7cee45035
-
SHA256
271a66b325488a92ed69c0131812d6979c041b6f373b9d56075aee577d38eb69
-
SHA512
6fddedababfd0b672552d9e6248d699313dd81c0e0d20cec741a02aa732d473d274b2462925ec5ee83aaa3f3f7db9c65e1900c3c8606349661cbe076e219fb34
-
SSDEEP
49152:n09XJt4HIN2H2tFvduySvpeIZPItx2apeapelI:0ZJt4HINy2LksRtUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-