General
-
Target
7697d253a0eb4000268659c2abfe2668420075eb1747a2d343cbdfb8af7cd9e5
-
Size
2.9MB
-
Sample
230828-spxy1afb3t
-
MD5
f47babc71fbb2f8daa814d15762ea3a2
-
SHA1
f7573e4eaa2951317531706077ccedb25ecdf83a
-
SHA256
7697d253a0eb4000268659c2abfe2668420075eb1747a2d343cbdfb8af7cd9e5
-
SHA512
c3ab5cf744d8f20f6c866fd830fa281d86b92831f33823e5f3ace2e817e49d99f7110d4c0f46cdb01847c7d30cbe749474971948bcbdb5037f2ebc9e0c5e7880
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2j54xTlxMHJm:yws2ANnKXOaeOgmhVKDmn2VIMHJm
Static task
static1
Behavioral task
behavioral1
Sample
7697d253a0eb4000268659c2abfe2668420075eb1747a2d343cbdfb8af7cd9e5.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
7697d253a0eb4000268659c2abfe2668420075eb1747a2d343cbdfb8af7cd9e5
-
Size
2.9MB
-
MD5
f47babc71fbb2f8daa814d15762ea3a2
-
SHA1
f7573e4eaa2951317531706077ccedb25ecdf83a
-
SHA256
7697d253a0eb4000268659c2abfe2668420075eb1747a2d343cbdfb8af7cd9e5
-
SHA512
c3ab5cf744d8f20f6c866fd830fa281d86b92831f33823e5f3ace2e817e49d99f7110d4c0f46cdb01847c7d30cbe749474971948bcbdb5037f2ebc9e0c5e7880
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2j54xTlxMHJm:yws2ANnKXOaeOgmhVKDmn2VIMHJm
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-