General
-
Target
a22d358ef141c71b7d39829760d0e6bad555f7109bd08eba5e57ff4cbc5cf645
-
Size
2.6MB
-
Sample
230828-s73xzafd7t
-
MD5
a588d638e21f7a99afb50464eed25ee3
-
SHA1
ef4fdafc8da449ccf65b6827d744c8c7c2a70c12
-
SHA256
a22d358ef141c71b7d39829760d0e6bad555f7109bd08eba5e57ff4cbc5cf645
-
SHA512
3d2407613f168b03ee627362ac9cb559f8c824fc947aba9f0bd46392ba555d25e3d500c89cf5be2309f9300197bd2a6133010f9c3c2037870211e3ac1f674792
-
SSDEEP
49152:SCwsbCANnKXferL7Vwe/Gg0P+WhUKEGxqms:1ws2ANnKXOaeOgmhUKEGxqj
Static task
static1
Behavioral task
behavioral1
Sample
a22d358ef141c71b7d39829760d0e6bad555f7109bd08eba5e57ff4cbc5cf645.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
a22d358ef141c71b7d39829760d0e6bad555f7109bd08eba5e57ff4cbc5cf645
-
Size
2.6MB
-
MD5
a588d638e21f7a99afb50464eed25ee3
-
SHA1
ef4fdafc8da449ccf65b6827d744c8c7c2a70c12
-
SHA256
a22d358ef141c71b7d39829760d0e6bad555f7109bd08eba5e57ff4cbc5cf645
-
SHA512
3d2407613f168b03ee627362ac9cb559f8c824fc947aba9f0bd46392ba555d25e3d500c89cf5be2309f9300197bd2a6133010f9c3c2037870211e3ac1f674792
-
SSDEEP
49152:SCwsbCANnKXferL7Vwe/Gg0P+WhUKEGxqms:1ws2ANnKXOaeOgmhUKEGxqj
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-