General
-
Target
745d938d6e708476e4e8a0c7e96c765d2498affcdda045d688b920cbe641e04a
-
Size
2.6MB
-
Sample
230828-x3fzvsfb79
-
MD5
84d0f4faaa31400ec590b27bb3b19a0b
-
SHA1
9eb32eb08c6c1c4c45157ffabb0cdea8b91fe3be
-
SHA256
745d938d6e708476e4e8a0c7e96c765d2498affcdda045d688b920cbe641e04a
-
SHA512
2665606ce617ba9507af59fb4b92c9fe00f7a362a808106bc5fc32b1ba27156ba6525ce4d586fdaa174940632443d9395c50f0beb0fa1f1039ba7d3fe1f78011
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2ATV:yws2ANnKXOaeOgmhVKDmn2ATV
Static task
static1
Behavioral task
behavioral1
Sample
745d938d6e708476e4e8a0c7e96c765d2498affcdda045d688b920cbe641e04a.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
745d938d6e708476e4e8a0c7e96c765d2498affcdda045d688b920cbe641e04a
-
Size
2.6MB
-
MD5
84d0f4faaa31400ec590b27bb3b19a0b
-
SHA1
9eb32eb08c6c1c4c45157ffabb0cdea8b91fe3be
-
SHA256
745d938d6e708476e4e8a0c7e96c765d2498affcdda045d688b920cbe641e04a
-
SHA512
2665606ce617ba9507af59fb4b92c9fe00f7a362a808106bc5fc32b1ba27156ba6525ce4d586fdaa174940632443d9395c50f0beb0fa1f1039ba7d3fe1f78011
-
SSDEEP
49152:cjwsbCANnKXferL7Vwe/Gg0P+WhVKDmn2ATV:yws2ANnKXOaeOgmhVKDmn2ATV
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-