General
-
Target
127c71f654be4ed1c1f9934ab0f8730a69df0ca6f44941c072ee1cfb98c5c549
-
Size
1.1MB
-
Sample
240523-j9bf3aaf53
-
MD5
2717594b194ec8cef340dc97f485d443
-
SHA1
4247be531e7d8a3270473a9f0101e05f752d6f71
-
SHA256
127c71f654be4ed1c1f9934ab0f8730a69df0ca6f44941c072ee1cfb98c5c549
-
SHA512
f052d35b65816d55aaaa23332b5bf359dbc281275350dffb6cfffc7abd7c654340a696c2b96cdf5c6a5a849fd28bbd3c780e36e0e6b009da2ec2c46c61c4ab6d
-
SSDEEP
24576:S09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+72N:S09XJt4HIN2H2tFvduyStG
Static task
static1
Behavioral task
behavioral1
Sample
127c71f654be4ed1c1f9934ab0f8730a69df0ca6f44941c072ee1cfb98c5c549.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
127c71f654be4ed1c1f9934ab0f8730a69df0ca6f44941c072ee1cfb98c5c549
-
Size
1.1MB
-
MD5
2717594b194ec8cef340dc97f485d443
-
SHA1
4247be531e7d8a3270473a9f0101e05f752d6f71
-
SHA256
127c71f654be4ed1c1f9934ab0f8730a69df0ca6f44941c072ee1cfb98c5c549
-
SHA512
f052d35b65816d55aaaa23332b5bf359dbc281275350dffb6cfffc7abd7c654340a696c2b96cdf5c6a5a849fd28bbd3c780e36e0e6b009da2ec2c46c61c4ab6d
-
SSDEEP
24576:S09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+72N:S09XJt4HIN2H2tFvduyStG
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-