General
-
Target
2aa37633f690fd441c8a810f3b5f41da1651bb5cbe76ce4616a3465510305995
-
Size
4.5MB
-
Sample
230824-n1dmaacc74
-
MD5
f7261ba29a6498df39e6af6f6b982894
-
SHA1
349025201f328b7d5d9dd10781d56d2813b6040a
-
SHA256
2aa37633f690fd441c8a810f3b5f41da1651bb5cbe76ce4616a3465510305995
-
SHA512
3f255a4cfe09fc5b976a3943642c7a4f28723b8b06833f509117c8dc26dc4a7f68350ac1f7d5cf3edc28aea6637ef65e123de628a3add8bffd6fdebdd7ec4b1a
-
SSDEEP
49152:c09XJt4HIN2H2tFvduySCbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8R:BZJt4HINy2LkCbXsPN5kiQaZ56
Static task
static1
Behavioral task
behavioral1
Sample
2aa37633f690fd441c8a810f3b5f41da1651bb5cbe76ce4616a3465510305995.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
2aa37633f690fd441c8a810f3b5f41da1651bb5cbe76ce4616a3465510305995
-
Size
4.5MB
-
MD5
f7261ba29a6498df39e6af6f6b982894
-
SHA1
349025201f328b7d5d9dd10781d56d2813b6040a
-
SHA256
2aa37633f690fd441c8a810f3b5f41da1651bb5cbe76ce4616a3465510305995
-
SHA512
3f255a4cfe09fc5b976a3943642c7a4f28723b8b06833f509117c8dc26dc4a7f68350ac1f7d5cf3edc28aea6637ef65e123de628a3add8bffd6fdebdd7ec4b1a
-
SSDEEP
49152:c09XJt4HIN2H2tFvduySCbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8R:BZJt4HINy2LkCbXsPN5kiQaZ56
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-