General
-
Target
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd
-
Size
1.2MB
-
Sample
240523-rmkp8aea3x
-
MD5
55b2f37b840dc6c20e5f4a4810d3ffab
-
SHA1
cd37161e0d6fcdb6e40def756ea9157852a0f40c
-
SHA256
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd
-
SHA512
ff6ab54ae080f39efac1d04cc92be69fa07195fc7671f03f2d535ea837f4731491385b2e12b133a15bc87821b55d0101aab796720651b3bc8f14b60278b7177a
-
SSDEEP
24576:yYFbkIsaPiXSVnC7Yp9zkNmZG8RRlngyzx:yYREXSVMDi3t
Static task
static1
Behavioral task
behavioral1
Sample
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd
-
Size
1.2MB
-
MD5
55b2f37b840dc6c20e5f4a4810d3ffab
-
SHA1
cd37161e0d6fcdb6e40def756ea9157852a0f40c
-
SHA256
c73a0e8281ffa34581f3b5aede52e04052c0fb90e75df72db137aa4001efbdcd
-
SHA512
ff6ab54ae080f39efac1d04cc92be69fa07195fc7671f03f2d535ea837f4731491385b2e12b133a15bc87821b55d0101aab796720651b3bc8f14b60278b7177a
-
SSDEEP
24576:yYFbkIsaPiXSVnC7Yp9zkNmZG8RRlngyzx:yYREXSVMDi3t
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-