General
-
Target
2d97469fa4fc41a16916e3bc1cb23b388e87a0d8da4f10af4b8b312bf6527ae4
-
Size
12.7MB
-
Sample
240523-fk6zwsee36
-
MD5
cd1d76abd71f80c186e510b612dae7e7
-
SHA1
8766abe47297de7ab05587adfdfbc00c720d31b2
-
SHA256
2d97469fa4fc41a16916e3bc1cb23b388e87a0d8da4f10af4b8b312bf6527ae4
-
SHA512
55a9fb12de54b9fde99e4bcfc4447b4c24177c3a72e76d758cf8a62cc99365ff4af9fd72eab5302ab381738962949874e1cefdae574aebf8337e334eab5ac484
-
SSDEEP
196608:kKXbeO7EZrRwRGJOPPNNDaYA3g1/Nf9PU2068YTrZoyaGOIzSMSY:V7ElaPP/aYA3gXFU2H8YJoyaf8zS
Static task
static1
Behavioral task
behavioral1
Sample
2d97469fa4fc41a16916e3bc1cb23b388e87a0d8da4f10af4b8b312bf6527ae4.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
2d97469fa4fc41a16916e3bc1cb23b388e87a0d8da4f10af4b8b312bf6527ae4
-
Size
12.7MB
-
MD5
cd1d76abd71f80c186e510b612dae7e7
-
SHA1
8766abe47297de7ab05587adfdfbc00c720d31b2
-
SHA256
2d97469fa4fc41a16916e3bc1cb23b388e87a0d8da4f10af4b8b312bf6527ae4
-
SHA512
55a9fb12de54b9fde99e4bcfc4447b4c24177c3a72e76d758cf8a62cc99365ff4af9fd72eab5302ab381738962949874e1cefdae574aebf8337e334eab5ac484
-
SSDEEP
196608:kKXbeO7EZrRwRGJOPPNNDaYA3g1/Nf9PU2068YTrZoyaGOIzSMSY:V7ElaPP/aYA3gXFU2H8YJoyaf8zS
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-