General
-
Target
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2
-
Size
4.3MB
-
Sample
240524-d9qcbsbg4s
-
MD5
adce9c40eca494717f1b12c6f86c7faa
-
SHA1
f2979779fa3f49bfb3c9f6521951b2fe96640178
-
SHA256
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2
-
SHA512
8d6f8a3a6906da0de4e469867baf78cddfa2240c13e02fdfd989c30620ce656e142c8a0f78526393a3dbf1d6fb653f441b20183906e5d33c3abca2785cfc2343
-
SSDEEP
98304:C2SVMD8znlEeVaoYveHz0fCF2rkV8csteB+:S9nlEka2Hz0fCF2r08hteB+
Static task
static1
Behavioral task
behavioral1
Sample
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2
-
Size
4.3MB
-
MD5
adce9c40eca494717f1b12c6f86c7faa
-
SHA1
f2979779fa3f49bfb3c9f6521951b2fe96640178
-
SHA256
4c19688930fc9f8e3cb42cdbdf12ea0750e8362ef37f2a26711039f68e6dacf2
-
SHA512
8d6f8a3a6906da0de4e469867baf78cddfa2240c13e02fdfd989c30620ce656e142c8a0f78526393a3dbf1d6fb653f441b20183906e5d33c3abca2785cfc2343
-
SSDEEP
98304:C2SVMD8znlEeVaoYveHz0fCF2rkV8csteB+:S9nlEka2Hz0fCF2r08hteB+
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-