General
-
Target
a89ed36384183e1603eef35edf8b05726a4258ebcf4b96f302c744d1706d64fa
-
Size
2.6MB
-
Sample
240419-y3475afc41
-
MD5
77de16385a8be7475f52ecd3ed894903
-
SHA1
b778bd2c65c411c902ffa98305d14d0ea674549d
-
SHA256
a89ed36384183e1603eef35edf8b05726a4258ebcf4b96f302c744d1706d64fa
-
SHA512
f352996a13930a39a81a5fa0a584f74f6cb44e077ef7fa3fe101beb5dc434ade0b1c971f327e3b169c1577b87347c29b3ef632410759c67c84116f353450c049
-
SSDEEP
24576:FCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHB:FCwsbCANnKXferL7Vwe/Gg0P+WhqS+T
Static task
static1
Behavioral task
behavioral1
Sample
a89ed36384183e1603eef35edf8b05726a4258ebcf4b96f302c744d1706d64fa.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
a89ed36384183e1603eef35edf8b05726a4258ebcf4b96f302c744d1706d64fa
-
Size
2.6MB
-
MD5
77de16385a8be7475f52ecd3ed894903
-
SHA1
b778bd2c65c411c902ffa98305d14d0ea674549d
-
SHA256
a89ed36384183e1603eef35edf8b05726a4258ebcf4b96f302c744d1706d64fa
-
SHA512
f352996a13930a39a81a5fa0a584f74f6cb44e077ef7fa3fe101beb5dc434ade0b1c971f327e3b169c1577b87347c29b3ef632410759c67c84116f353450c049
-
SSDEEP
24576:FCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHB:FCwsbCANnKXferL7Vwe/Gg0P+WhqS+T
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-