General
-
Target
3dbc193b7cd46832cdf35cf46f2e926501537d8dd3a010b5a31f995b27ac512f
-
Size
1.6MB
-
Sample
230824-bbdjrsgh56
-
MD5
9c93ed85b66bcf6d477edf2cadb94cc2
-
SHA1
4a7265085b353fb198d99c0be25bf9d9a6d618e3
-
SHA256
3dbc193b7cd46832cdf35cf46f2e926501537d8dd3a010b5a31f995b27ac512f
-
SHA512
19a89a6f52d7a2629e9ceae2e5b6742f6bcb407d563790aff44fab1323ec12db4526f92812133a81b31958d4685f0f6773b11d9d9b2aa1a8dc46de00cabbd9b9
-
SSDEEP
24576:LQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVBwpeKNSS24s:LQZAdVyVT9n/Gg0P+Whozpe14s
Static task
static1
Behavioral task
behavioral1
Sample
3dbc193b7cd46832cdf35cf46f2e926501537d8dd3a010b5a31f995b27ac512f.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
3dbc193b7cd46832cdf35cf46f2e926501537d8dd3a010b5a31f995b27ac512f
-
Size
1.6MB
-
MD5
9c93ed85b66bcf6d477edf2cadb94cc2
-
SHA1
4a7265085b353fb198d99c0be25bf9d9a6d618e3
-
SHA256
3dbc193b7cd46832cdf35cf46f2e926501537d8dd3a010b5a31f995b27ac512f
-
SHA512
19a89a6f52d7a2629e9ceae2e5b6742f6bcb407d563790aff44fab1323ec12db4526f92812133a81b31958d4685f0f6773b11d9d9b2aa1a8dc46de00cabbd9b9
-
SSDEEP
24576:LQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVBwpeKNSS24s:LQZAdVyVT9n/Gg0P+Whozpe14s
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-