General
-
Target
05e3bedf102c580cc878bc56d505f49fb86ed49e0a939dc8e4fd97b10fa98939
-
Size
2.6MB
-
Sample
240421-y1jhmsah55
-
MD5
66770f852148513c0021ef63b98ca463
-
SHA1
1e36121596531f24d2c6f689bf9364d2dc811c8f
-
SHA256
05e3bedf102c580cc878bc56d505f49fb86ed49e0a939dc8e4fd97b10fa98939
-
SHA512
372a12250f2668976582f851f7bb9f77b6a3d231a9ec5ad3a263303d362d94cfdb04cf38cfb19b52e0936fe6a4d21e5452ddf06e7807fbe88b45a8e82639bd13
-
SSDEEP
49152:6jwsbCANnKXferL7Vwe/Gg0P+WhaleDmn2l:gws2ANnKXOaeOgmhDDmn2l
Static task
static1
Behavioral task
behavioral1
Sample
05e3bedf102c580cc878bc56d505f49fb86ed49e0a939dc8e4fd97b10fa98939.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
05e3bedf102c580cc878bc56d505f49fb86ed49e0a939dc8e4fd97b10fa98939
-
Size
2.6MB
-
MD5
66770f852148513c0021ef63b98ca463
-
SHA1
1e36121596531f24d2c6f689bf9364d2dc811c8f
-
SHA256
05e3bedf102c580cc878bc56d505f49fb86ed49e0a939dc8e4fd97b10fa98939
-
SHA512
372a12250f2668976582f851f7bb9f77b6a3d231a9ec5ad3a263303d362d94cfdb04cf38cfb19b52e0936fe6a4d21e5452ddf06e7807fbe88b45a8e82639bd13
-
SSDEEP
49152:6jwsbCANnKXferL7Vwe/Gg0P+WhaleDmn2l:gws2ANnKXOaeOgmhDDmn2l
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-