General
-
Target
bfaef2ef5234d35f5098612ce50f88f3066eda179b3b9b2e00432ddb7c386b35
-
Size
3.1MB
-
Sample
230828-s8lebacd85
-
MD5
f5eb577b5fc1273e8ef8fb7190d02e57
-
SHA1
9e0f1bc66392fa6f2398adae546d56b866985090
-
SHA256
bfaef2ef5234d35f5098612ce50f88f3066eda179b3b9b2e00432ddb7c386b35
-
SHA512
f9477b1c2ae7bf1394a7cd19ec7d7438873967e2d36fc3bc9371156e9a841aa65b5cd77131649922fe77121e38620a851e5fdb680694694834d547cb0197a62e
-
SSDEEP
49152:fCwsbCANnKXferL7Vwe/Gg0P+WhSJLBLHmgzV:Kws2ANnKXOaeOgmhSJdLG4V
Static task
static1
Behavioral task
behavioral1
Sample
bfaef2ef5234d35f5098612ce50f88f3066eda179b3b9b2e00432ddb7c386b35.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
bfaef2ef5234d35f5098612ce50f88f3066eda179b3b9b2e00432ddb7c386b35
-
Size
3.1MB
-
MD5
f5eb577b5fc1273e8ef8fb7190d02e57
-
SHA1
9e0f1bc66392fa6f2398adae546d56b866985090
-
SHA256
bfaef2ef5234d35f5098612ce50f88f3066eda179b3b9b2e00432ddb7c386b35
-
SHA512
f9477b1c2ae7bf1394a7cd19ec7d7438873967e2d36fc3bc9371156e9a841aa65b5cd77131649922fe77121e38620a851e5fdb680694694834d547cb0197a62e
-
SSDEEP
49152:fCwsbCANnKXferL7Vwe/Gg0P+WhSJLBLHmgzV:Kws2ANnKXOaeOgmhSJdLG4V
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-