General
-
Target
aea78b7499b6827d769a84b09b3016dcaecc36e405de2b8e774dc53f650f7dd8
-
Size
3.1MB
-
Sample
230828-me273scg9t
-
MD5
4452edde58ca2b2f92aad620a1507bab
-
SHA1
5cb083d1a4f1db503ef9240eef23070a9e044404
-
SHA256
aea78b7499b6827d769a84b09b3016dcaecc36e405de2b8e774dc53f650f7dd8
-
SHA512
8292dbad027fed95f832eff3d191d5fef516bbfcd9487339e9f0369e29c8a9aa4429c93e17788c005d0c2af3a412bf986d64e889c974e1446c28b9f5facdedb0
-
SSDEEP
98304:yws2ANnKXOaeOgmhVKDmn2mo4DH/mviccFE:oKXbeO7bamnTDH/mviccFE
Static task
static1
Behavioral task
behavioral1
Sample
aea78b7499b6827d769a84b09b3016dcaecc36e405de2b8e774dc53f650f7dd8.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
aea78b7499b6827d769a84b09b3016dcaecc36e405de2b8e774dc53f650f7dd8
-
Size
3.1MB
-
MD5
4452edde58ca2b2f92aad620a1507bab
-
SHA1
5cb083d1a4f1db503ef9240eef23070a9e044404
-
SHA256
aea78b7499b6827d769a84b09b3016dcaecc36e405de2b8e774dc53f650f7dd8
-
SHA512
8292dbad027fed95f832eff3d191d5fef516bbfcd9487339e9f0369e29c8a9aa4429c93e17788c005d0c2af3a412bf986d64e889c974e1446c28b9f5facdedb0
-
SSDEEP
98304:yws2ANnKXOaeOgmhVKDmn2mo4DH/mviccFE:oKXbeO7bamnTDH/mviccFE
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-