General
-
Target
6762bc0c4bcebed4349ccf620526cd52c5dd6bcaef197ce05196d5547e744de2
-
Size
1.1MB
-
Sample
230823-yhag1sfb64
-
MD5
c011768eabef21dd7974667ba6690a9a
-
SHA1
d6073bcfee4b2e783b9e30f95e0945eec331d846
-
SHA256
6762bc0c4bcebed4349ccf620526cd52c5dd6bcaef197ce05196d5547e744de2
-
SHA512
1d831a1051bc82abdb94d1ddac51f56bdd932ef7b83461363852c491d77907b7edd0aa052cd25564ab54ca8c45d8289333b60d35c2dc2f3e3d67f2ec56376eed
-
SSDEEP
24576:DIsR3f3OwxgOP/FEzFkcWXM64xnlU/XsIyADrkrlOaFstexLEUFveOD0:Df9Ww3H48wlU/3ilBFstVEX0
Static task
static1
Behavioral task
behavioral1
Sample
6762bc0c4bcebed4349ccf620526cd52c5dd6bcaef197ce05196d5547e744de2.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
6762bc0c4bcebed4349ccf620526cd52c5dd6bcaef197ce05196d5547e744de2
-
Size
1.1MB
-
MD5
c011768eabef21dd7974667ba6690a9a
-
SHA1
d6073bcfee4b2e783b9e30f95e0945eec331d846
-
SHA256
6762bc0c4bcebed4349ccf620526cd52c5dd6bcaef197ce05196d5547e744de2
-
SHA512
1d831a1051bc82abdb94d1ddac51f56bdd932ef7b83461363852c491d77907b7edd0aa052cd25564ab54ca8c45d8289333b60d35c2dc2f3e3d67f2ec56376eed
-
SSDEEP
24576:DIsR3f3OwxgOP/FEzFkcWXM64xnlU/XsIyADrkrlOaFstexLEUFveOD0:Df9Ww3H48wlU/3ilBFstVEX0
-
Gh0st RAT payload
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-