General
-
Target
438ef7a15c45fe3d6ecdf0f78ff4c5e0ef77988c2bdcbc8928fee20409c23552
-
Size
2.4MB
-
Sample
240523-e5alradg91
-
MD5
ad7c25e33d742f7e525b1e00e0f1941e
-
SHA1
f9051be0d89bace732dd26c7769a673c063a1e01
-
SHA256
438ef7a15c45fe3d6ecdf0f78ff4c5e0ef77988c2bdcbc8928fee20409c23552
-
SHA512
2c285c7274a5bfbe53ef5d891fccc28b735fed22e09937440e62b44353e6b1f5ccf6508a1eaf37d4a307f095be40fee5c0cd1f6c657a910d976fe81dd7898540
-
SSDEEP
49152:xCwsbCANnKXferL7Vwe/Gg0P+Wh4BSJXAA:8ws2ANnKXOaeOgmh4BSKA
Static task
static1
Behavioral task
behavioral1
Sample
438ef7a15c45fe3d6ecdf0f78ff4c5e0ef77988c2bdcbc8928fee20409c23552.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
438ef7a15c45fe3d6ecdf0f78ff4c5e0ef77988c2bdcbc8928fee20409c23552
-
Size
2.4MB
-
MD5
ad7c25e33d742f7e525b1e00e0f1941e
-
SHA1
f9051be0d89bace732dd26c7769a673c063a1e01
-
SHA256
438ef7a15c45fe3d6ecdf0f78ff4c5e0ef77988c2bdcbc8928fee20409c23552
-
SHA512
2c285c7274a5bfbe53ef5d891fccc28b735fed22e09937440e62b44353e6b1f5ccf6508a1eaf37d4a307f095be40fee5c0cd1f6c657a910d976fe81dd7898540
-
SSDEEP
49152:xCwsbCANnKXferL7Vwe/Gg0P+Wh4BSJXAA:8ws2ANnKXOaeOgmh4BSKA
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-