General
-
Target
b114037b3cbfad3086c1d8d74764e3d8dd03e8d7ebc8cbc7f40ed11f3a99d0d9
-
Size
2.5MB
-
Sample
240422-rlms7acc37
-
MD5
a43fa50b5c52c44f9ac1c64ed80ff474
-
SHA1
1de19a7a5798206f9cf1a2f1c6d08e1174c1d9d9
-
SHA256
b114037b3cbfad3086c1d8d74764e3d8dd03e8d7ebc8cbc7f40ed11f3a99d0d9
-
SHA512
2319ab06553c8eca756bfa6a19928fda6482b1531d6495f55d5654fdc4c28c6f2e6c022451ba656c2f8a5ba844fe3a6210f659e00db9f36a58b0f291a7555ced
-
SSDEEP
24576:ACwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH0:ACwsbCANnKXferL7Vwe/Gg0P+WhjZn2e
Static task
static1
Behavioral task
behavioral1
Sample
b114037b3cbfad3086c1d8d74764e3d8dd03e8d7ebc8cbc7f40ed11f3a99d0d9.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
b114037b3cbfad3086c1d8d74764e3d8dd03e8d7ebc8cbc7f40ed11f3a99d0d9
-
Size
2.5MB
-
MD5
a43fa50b5c52c44f9ac1c64ed80ff474
-
SHA1
1de19a7a5798206f9cf1a2f1c6d08e1174c1d9d9
-
SHA256
b114037b3cbfad3086c1d8d74764e3d8dd03e8d7ebc8cbc7f40ed11f3a99d0d9
-
SHA512
2319ab06553c8eca756bfa6a19928fda6482b1531d6495f55d5654fdc4c28c6f2e6c022451ba656c2f8a5ba844fe3a6210f659e00db9f36a58b0f291a7555ced
-
SSDEEP
24576:ACwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH0:ACwsbCANnKXferL7Vwe/Gg0P+WhjZn2e
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-