General
-
Target
9f61a3757f737404c25a2837ddd1ff6c14dfe394127c8a94c5c10f00dfa34811
-
Size
4.6MB
-
Sample
240405-et7r4scd79
-
MD5
3dfe6ff32db8cd1e7f6b2fba4c308836
-
SHA1
a609b1de628998746bd1f33616f2a3324764fb52
-
SHA256
9f61a3757f737404c25a2837ddd1ff6c14dfe394127c8a94c5c10f00dfa34811
-
SHA512
fa169e2f01ef3f970c1b79ced8f5040117e9dff32ff4f55c13681cf468fb020bac9b2c59d426f2e97f170fd95cfdb3704346dbc0ba75925658acd0c6d72609f2
-
SSDEEP
98304:iws2ANnKXOaeOgmh707KZxDnDCa+WlcelG07E2MLM:4KXbeO7a2v5zyelw2M
Static task
static1
Behavioral task
behavioral1
Sample
9f61a3757f737404c25a2837ddd1ff6c14dfe394127c8a94c5c10f00dfa34811.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
9f61a3757f737404c25a2837ddd1ff6c14dfe394127c8a94c5c10f00dfa34811
-
Size
4.6MB
-
MD5
3dfe6ff32db8cd1e7f6b2fba4c308836
-
SHA1
a609b1de628998746bd1f33616f2a3324764fb52
-
SHA256
9f61a3757f737404c25a2837ddd1ff6c14dfe394127c8a94c5c10f00dfa34811
-
SHA512
fa169e2f01ef3f970c1b79ced8f5040117e9dff32ff4f55c13681cf468fb020bac9b2c59d426f2e97f170fd95cfdb3704346dbc0ba75925658acd0c6d72609f2
-
SSDEEP
98304:iws2ANnKXOaeOgmh707KZxDnDCa+WlcelG07E2MLM:4KXbeO7a2v5zyelw2M
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-