General
-
Target
9c388dcbddeaf890a5297b4962d4a97c2fff52509b2a6b59ba2a0d836e4c5781
-
Size
2.9MB
-
Sample
240423-c2w98sbg42
-
MD5
18eea7bac1277afd3092ffe2cfa1ffa1
-
SHA1
0a961abe36f5d6f8202e668d7ceb8139f1df9806
-
SHA256
9c388dcbddeaf890a5297b4962d4a97c2fff52509b2a6b59ba2a0d836e4c5781
-
SHA512
8d6ce9b653324c39fa3d8a07c54efe02bb981e12647475417ef904bcf11fce957fce678c00aef7ee0b2db9c26328a64479626c07386e9c47b450edc00ebd3b5c
-
SSDEEP
49152:hjwsbCANnKXferL7Vwe/Gg0P+WhZwwMCBl9YeDmn2X:tws2ANnKXOaeOgmhZwwMCBl9YeDmn2X
Static task
static1
Behavioral task
behavioral1
Sample
9c388dcbddeaf890a5297b4962d4a97c2fff52509b2a6b59ba2a0d836e4c5781.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
9c388dcbddeaf890a5297b4962d4a97c2fff52509b2a6b59ba2a0d836e4c5781
-
Size
2.9MB
-
MD5
18eea7bac1277afd3092ffe2cfa1ffa1
-
SHA1
0a961abe36f5d6f8202e668d7ceb8139f1df9806
-
SHA256
9c388dcbddeaf890a5297b4962d4a97c2fff52509b2a6b59ba2a0d836e4c5781
-
SHA512
8d6ce9b653324c39fa3d8a07c54efe02bb981e12647475417ef904bcf11fce957fce678c00aef7ee0b2db9c26328a64479626c07386e9c47b450edc00ebd3b5c
-
SSDEEP
49152:hjwsbCANnKXferL7Vwe/Gg0P+WhZwwMCBl9YeDmn2X:tws2ANnKXOaeOgmhZwwMCBl9YeDmn2X
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-