General
-
Target
7b460749c5e95ff2cbc8cde07d81c51cba3d59c3aa96830df6c824126283ae8b
-
Size
2.5MB
-
Sample
230827-wz9x4acf24
-
MD5
4d0a9182a2320b1ce7a7da7eeec7c925
-
SHA1
2aa71c775d8eb46b25b54f5ab96c614aaf9bf822
-
SHA256
7b460749c5e95ff2cbc8cde07d81c51cba3d59c3aa96830df6c824126283ae8b
-
SHA512
ebc6e70e3e350322a746951d039c895c69606b54e51ac5661339164b265e89c57aaec5b40a3a56cbce0203659b150ff2410937e7f444188ff25a84732e91f92c
-
SSDEEP
49152:0CwsbCANnKXferL7Vwe/Gg0P+WhwaH+Zyn2O:Xws2ANnKXOaeOgmhwaSyn2O
Static task
static1
Behavioral task
behavioral1
Sample
7b460749c5e95ff2cbc8cde07d81c51cba3d59c3aa96830df6c824126283ae8b.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
7b460749c5e95ff2cbc8cde07d81c51cba3d59c3aa96830df6c824126283ae8b
-
Size
2.5MB
-
MD5
4d0a9182a2320b1ce7a7da7eeec7c925
-
SHA1
2aa71c775d8eb46b25b54f5ab96c614aaf9bf822
-
SHA256
7b460749c5e95ff2cbc8cde07d81c51cba3d59c3aa96830df6c824126283ae8b
-
SHA512
ebc6e70e3e350322a746951d039c895c69606b54e51ac5661339164b265e89c57aaec5b40a3a56cbce0203659b150ff2410937e7f444188ff25a84732e91f92c
-
SSDEEP
49152:0CwsbCANnKXferL7Vwe/Gg0P+WhwaH+Zyn2O:Xws2ANnKXOaeOgmhwaSyn2O
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-