General
-
Target
bf0e4042634518801d42a2a120f9b82547501b43fae0405e474c422ea5984b1a.exe
-
Size
3.0MB
-
Sample
240524-mhk3zadf6y
-
MD5
d6c82ea8e9d9c1e5051d507c21dac279
-
SHA1
30d04657c6f57d0349cfa74a83bf87ea7de154fe
-
SHA256
bf0e4042634518801d42a2a120f9b82547501b43fae0405e474c422ea5984b1a
-
SHA512
c9ebfac9800c3ce922503214896d6c239fb29636bbaabc0151312bbe4a2ea019bccd44acf4fe5648a4f5e75152014ac38ddb95f445d3cd28fdc5c68b4ba0694f
-
SSDEEP
49152:C09XJt4HIN2H2tFvduySlgTfBk4tg8qaf2VH5u4RQw6ZVWZX1H7r:jZJt4HINy2LkeTfW4Jf255JQwjX1
Static task
static1
Behavioral task
behavioral1
Sample
bf0e4042634518801d42a2a120f9b82547501b43fae0405e474c422ea5984b1a.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
bf0e4042634518801d42a2a120f9b82547501b43fae0405e474c422ea5984b1a.exe
-
Size
3.0MB
-
MD5
d6c82ea8e9d9c1e5051d507c21dac279
-
SHA1
30d04657c6f57d0349cfa74a83bf87ea7de154fe
-
SHA256
bf0e4042634518801d42a2a120f9b82547501b43fae0405e474c422ea5984b1a
-
SHA512
c9ebfac9800c3ce922503214896d6c239fb29636bbaabc0151312bbe4a2ea019bccd44acf4fe5648a4f5e75152014ac38ddb95f445d3cd28fdc5c68b4ba0694f
-
SSDEEP
49152:C09XJt4HIN2H2tFvduySlgTfBk4tg8qaf2VH5u4RQw6ZVWZX1H7r:jZJt4HINy2LkeTfW4Jf255JQwjX1
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-