General
-
Target
3d6c55a41196e573a44153aaf6b3d8892fca5d633ff4db972c9a22413c191796
-
Size
1.3MB
-
Sample
230828-kz9fsaba42
-
MD5
15ce8fb7439bcffd59faa4d4dd2f56c5
-
SHA1
ef8496eb4b39848d8e6dcbb40523d7a92737bad3
-
SHA256
3d6c55a41196e573a44153aaf6b3d8892fca5d633ff4db972c9a22413c191796
-
SHA512
d08366762eda8852680edb43dfc5fbc317d9aca0654cdc5ceaec229bb0c3edf2180ee0af835455ec228733d4d2f79f23174608b0ad1e7fea3ea1a7332b0b02ea
-
SSDEEP
24576:7QZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVIXXz1PF:7QZAdVyVT9n/Gg0P+WhobXXzj
Static task
static1
Behavioral task
behavioral1
Sample
3d6c55a41196e573a44153aaf6b3d8892fca5d633ff4db972c9a22413c191796.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
3d6c55a41196e573a44153aaf6b3d8892fca5d633ff4db972c9a22413c191796
-
Size
1.3MB
-
MD5
15ce8fb7439bcffd59faa4d4dd2f56c5
-
SHA1
ef8496eb4b39848d8e6dcbb40523d7a92737bad3
-
SHA256
3d6c55a41196e573a44153aaf6b3d8892fca5d633ff4db972c9a22413c191796
-
SHA512
d08366762eda8852680edb43dfc5fbc317d9aca0654cdc5ceaec229bb0c3edf2180ee0af835455ec228733d4d2f79f23174608b0ad1e7fea3ea1a7332b0b02ea
-
SSDEEP
24576:7QZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVIXXz1PF:7QZAdVyVT9n/Gg0P+WhobXXzj
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-