General
-
Target
7da9e6e83d20dbd8f79021fd108c3976de0da028afc43b79afce561de200cab1
-
Size
2.4MB
-
Sample
240524-ml9kqsdg8v
-
MD5
4628ba586fa3f512e6dc8286776070aa
-
SHA1
fe9d9d4697d4139199d761c804527ee87a6a6700
-
SHA256
7da9e6e83d20dbd8f79021fd108c3976de0da028afc43b79afce561de200cab1
-
SHA512
816a505a18c2d548e4ff7b7166aafec33e25ef489fac1a96f5a7f14c11c443e99f9a5bb95fc6dfbec0a43b9a42f1880ff1be7bc6dcd0f8d7710ce1e27068f117
-
SSDEEP
24576:NCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHD:NCwsbCANnKXferL7Vwe/Gg0P+WhFTa
Static task
static1
Behavioral task
behavioral1
Sample
7da9e6e83d20dbd8f79021fd108c3976de0da028afc43b79afce561de200cab1.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
7da9e6e83d20dbd8f79021fd108c3976de0da028afc43b79afce561de200cab1
-
Size
2.4MB
-
MD5
4628ba586fa3f512e6dc8286776070aa
-
SHA1
fe9d9d4697d4139199d761c804527ee87a6a6700
-
SHA256
7da9e6e83d20dbd8f79021fd108c3976de0da028afc43b79afce561de200cab1
-
SHA512
816a505a18c2d548e4ff7b7166aafec33e25ef489fac1a96f5a7f14c11c443e99f9a5bb95fc6dfbec0a43b9a42f1880ff1be7bc6dcd0f8d7710ce1e27068f117
-
SSDEEP
24576:NCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHD:NCwsbCANnKXferL7Vwe/Gg0P+WhFTa
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-