General
-
Target
61f88761fc040937b91ab5728e23b239e14a036fb8e8e20e2fa88b17b999a519
-
Size
2.7MB
-
Sample
240423-c871babh44
-
MD5
85463017faf2292973ff5b4ac6628e46
-
SHA1
db1273a9af16ee4dd5c02bec0af1aa529ef88ae7
-
SHA256
61f88761fc040937b91ab5728e23b239e14a036fb8e8e20e2fa88b17b999a519
-
SHA512
594e49201f901b0938fbb690d71755246dc423fa5f38582a9f24f742b046a8ae3010d6be5fdaa427d5d3427ff70b90e0f812ce52f5c7dffd172f6882ca29e7a5
-
SSDEEP
24576:FCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHh:FCwsbCANnKXferL7Vwe/Gg0P+WhqS+/
Static task
static1
Behavioral task
behavioral1
Sample
61f88761fc040937b91ab5728e23b239e14a036fb8e8e20e2fa88b17b999a519.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
61f88761fc040937b91ab5728e23b239e14a036fb8e8e20e2fa88b17b999a519
-
Size
2.7MB
-
MD5
85463017faf2292973ff5b4ac6628e46
-
SHA1
db1273a9af16ee4dd5c02bec0af1aa529ef88ae7
-
SHA256
61f88761fc040937b91ab5728e23b239e14a036fb8e8e20e2fa88b17b999a519
-
SHA512
594e49201f901b0938fbb690d71755246dc423fa5f38582a9f24f742b046a8ae3010d6be5fdaa427d5d3427ff70b90e0f812ce52f5c7dffd172f6882ca29e7a5
-
SSDEEP
24576:FCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHh:FCwsbCANnKXferL7Vwe/Gg0P+WhqS+/
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-