General
-
Target
aa8e19d99a5ee8660503e3b1a69475af0d9d3393069dd4cbe729f52d61f62b20
-
Size
2.6MB
-
Sample
240524-l8fqhadd89
-
MD5
9453a61638673a2253899e82b2ba50bb
-
SHA1
df3ae0831d5cd1eb5ee1a5eaefc55411c2456980
-
SHA256
aa8e19d99a5ee8660503e3b1a69475af0d9d3393069dd4cbe729f52d61f62b20
-
SHA512
7f1544c1f7784cd422e593862a96a3fd701df43a74ed9025cac4614de2a5c56d7334f721fb39e39e41bfbf7edd8d8ec42d0b69aa76c4370f7aa2c18cc0463bfd
-
SSDEEP
49152:yCwsbCANnKXferL7Vwe/Gg0P+WhQHFqb:Vws2ANnKXOaeOgmhQHF
Static task
static1
Behavioral task
behavioral1
Sample
aa8e19d99a5ee8660503e3b1a69475af0d9d3393069dd4cbe729f52d61f62b20.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
aa8e19d99a5ee8660503e3b1a69475af0d9d3393069dd4cbe729f52d61f62b20
-
Size
2.6MB
-
MD5
9453a61638673a2253899e82b2ba50bb
-
SHA1
df3ae0831d5cd1eb5ee1a5eaefc55411c2456980
-
SHA256
aa8e19d99a5ee8660503e3b1a69475af0d9d3393069dd4cbe729f52d61f62b20
-
SHA512
7f1544c1f7784cd422e593862a96a3fd701df43a74ed9025cac4614de2a5c56d7334f721fb39e39e41bfbf7edd8d8ec42d0b69aa76c4370f7aa2c18cc0463bfd
-
SSDEEP
49152:yCwsbCANnKXferL7Vwe/Gg0P+WhQHFqb:Vws2ANnKXOaeOgmhQHF
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-