General
-
Target
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
-
Size
1.5MB
-
Sample
230831-k1lfcaec53
-
MD5
c646338e3db607d1b05f4cc078656bbb
-
SHA1
2accdfe05e4d50a2c2dc5596313b9ed87cd09e14
-
SHA256
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
-
SHA512
3e98acaac466db3530fed1d7bc850f20b89b467d77d67c8c40f029e89cb796ef4fce94b49279ca975dc24402534bb6274e8dc2163e6dacb2a1c55db6f61c9715
-
SSDEEP
24576:eYVLN+uGOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:BTT3HPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec.exe
Resource
win7-20230712-en
Malware Config
Targets
-
-
Target
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
-
Size
1.5MB
-
MD5
c646338e3db607d1b05f4cc078656bbb
-
SHA1
2accdfe05e4d50a2c2dc5596313b9ed87cd09e14
-
SHA256
bed0c3698d2a4d0e10fff6678389831f8cd361fe9af7c59acec33dac8c67d6ec
-
SHA512
3e98acaac466db3530fed1d7bc850f20b89b467d77d67c8c40f029e89cb796ef4fce94b49279ca975dc24402534bb6274e8dc2163e6dacb2a1c55db6f61c9715
-
SSDEEP
24576:eYVLN+uGOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:BTT3HPkVOBTK
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-