General
-
Target
0a3685765937ab36541365b347506e01fa3b76a0a0437dcba19a0e927c0010c9
-
Size
1.3MB
-
Sample
240425-z3xnqafa87
-
MD5
caeb32bd5c59b30d4d73f00d06660ce4
-
SHA1
73baa22b1afbf6a2a1399ed796d219aff64bcf25
-
SHA256
0a3685765937ab36541365b347506e01fa3b76a0a0437dcba19a0e927c0010c9
-
SHA512
85b4d35d351706ad9e09fbc066c090e371938fde2b31db6737e550ef2e99da5aba9cc0a1646ee9efa293e57f8e0fba5ff2d38d2507f008c85ceb52aa676b1b05
-
SSDEEP
24576:QQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cV7oKGq:QQZAdVyVT9n/Gg0P+Whojq
Static task
static1
Behavioral task
behavioral1
Sample
0a3685765937ab36541365b347506e01fa3b76a0a0437dcba19a0e927c0010c9.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0a3685765937ab36541365b347506e01fa3b76a0a0437dcba19a0e927c0010c9
-
Size
1.3MB
-
MD5
caeb32bd5c59b30d4d73f00d06660ce4
-
SHA1
73baa22b1afbf6a2a1399ed796d219aff64bcf25
-
SHA256
0a3685765937ab36541365b347506e01fa3b76a0a0437dcba19a0e927c0010c9
-
SHA512
85b4d35d351706ad9e09fbc066c090e371938fde2b31db6737e550ef2e99da5aba9cc0a1646ee9efa293e57f8e0fba5ff2d38d2507f008c85ceb52aa676b1b05
-
SSDEEP
24576:QQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cV7oKGq:QQZAdVyVT9n/Gg0P+Whojq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-