General
-
Target
36aed5f98e2fb9b5bfdd511c4523433fb064ccf8fa11e3ff35ea824263d9d971
-
Size
412KB
-
Sample
240419-mdr1qafh24
-
MD5
7e9da5d30b4a382f32849b0c1c023fc8
-
SHA1
a924946f56c22998e643e3968978cf4840f53084
-
SHA256
36aed5f98e2fb9b5bfdd511c4523433fb064ccf8fa11e3ff35ea824263d9d971
-
SHA512
80c3ee897533fff96912199c2aeea4bc92a5906027d92d3a16aa79ae9abd3f9b4f40c37224e6875d38eeaa686f374172e27ff78ae6edeb8da8cac17565f0f105
-
SSDEEP
6144:HSnXXvkgGTzz00trtpVIOnd4RM6P0Nmr6YmcSUJinTEZEx8UxDSwz84:yH0zlLVIO2mascS2iz8wDSwz8
Static task
static1
Behavioral task
behavioral1
Sample
36aed5f98e2fb9b5bfdd511c4523433fb064ccf8fa11e3ff35ea824263d9d971.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
36aed5f98e2fb9b5bfdd511c4523433fb064ccf8fa11e3ff35ea824263d9d971
-
Size
412KB
-
MD5
7e9da5d30b4a382f32849b0c1c023fc8
-
SHA1
a924946f56c22998e643e3968978cf4840f53084
-
SHA256
36aed5f98e2fb9b5bfdd511c4523433fb064ccf8fa11e3ff35ea824263d9d971
-
SHA512
80c3ee897533fff96912199c2aeea4bc92a5906027d92d3a16aa79ae9abd3f9b4f40c37224e6875d38eeaa686f374172e27ff78ae6edeb8da8cac17565f0f105
-
SSDEEP
6144:HSnXXvkgGTzz00trtpVIOnd4RM6P0Nmr6YmcSUJinTEZEx8UxDSwz84:yH0zlLVIO2mascS2iz8wDSwz8
-
Gh0st RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-