General
-
Target
934cc719b3844ff8680929cc5e39d0baaab649dc1de1c259574099be06dc30c0
-
Size
2.8MB
-
Sample
230828-pylqjsdh3s
-
MD5
5f9a20e147ab489e42391078e73e73c3
-
SHA1
e2d445f4357f7603584764cbfbf85bff6bdad6f9
-
SHA256
934cc719b3844ff8680929cc5e39d0baaab649dc1de1c259574099be06dc30c0
-
SHA512
18bb991fb2696d3e9fda00c159edc2799e404df8e4e13030c7b3f4dfd5c411546066735d03031008bc5b5ff064dde4000889b95cc9957b25ee2b586c7a4ad8dd
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2EO:yws2ANnKXOaeOgmhVKDmn23
Static task
static1
Behavioral task
behavioral1
Sample
934cc719b3844ff8680929cc5e39d0baaab649dc1de1c259574099be06dc30c0.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
934cc719b3844ff8680929cc5e39d0baaab649dc1de1c259574099be06dc30c0
-
Size
2.8MB
-
MD5
5f9a20e147ab489e42391078e73e73c3
-
SHA1
e2d445f4357f7603584764cbfbf85bff6bdad6f9
-
SHA256
934cc719b3844ff8680929cc5e39d0baaab649dc1de1c259574099be06dc30c0
-
SHA512
18bb991fb2696d3e9fda00c159edc2799e404df8e4e13030c7b3f4dfd5c411546066735d03031008bc5b5ff064dde4000889b95cc9957b25ee2b586c7a4ad8dd
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2EO:yws2ANnKXOaeOgmhVKDmn23
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-