General
-
Target
58ba419c0b613ce2bb2a4d367dc4e1d9fb6e774b553e6681e6d0dd28d96076f8.exe
-
Size
2.6MB
-
Sample
240524-ykdmfsha2w
-
MD5
c7d3fd343739ea103729276140b9d6eb
-
SHA1
f6caf5cd15aa99903a890836de6ca8e91dc7bff3
-
SHA256
58ba419c0b613ce2bb2a4d367dc4e1d9fb6e774b553e6681e6d0dd28d96076f8
-
SHA512
b9545b36a3905d5e61806fa9bd2c7981af369e4fe3fdde5a64b415c49c648a918c20c0f8e7f8636a6738994f4f854925a0806cc0dd77febc10f1d89b734d10f2
-
SSDEEP
49152:yCwsbCANnKXferL7Vwe/Gg0P+WhbLTwM6mn2G:Vws2ANnKXOaeOgmhPTwM6mn2G
Static task
static1
Behavioral task
behavioral1
Sample
58ba419c0b613ce2bb2a4d367dc4e1d9fb6e774b553e6681e6d0dd28d96076f8.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
58ba419c0b613ce2bb2a4d367dc4e1d9fb6e774b553e6681e6d0dd28d96076f8.exe
-
Size
2.6MB
-
MD5
c7d3fd343739ea103729276140b9d6eb
-
SHA1
f6caf5cd15aa99903a890836de6ca8e91dc7bff3
-
SHA256
58ba419c0b613ce2bb2a4d367dc4e1d9fb6e774b553e6681e6d0dd28d96076f8
-
SHA512
b9545b36a3905d5e61806fa9bd2c7981af369e4fe3fdde5a64b415c49c648a918c20c0f8e7f8636a6738994f4f854925a0806cc0dd77febc10f1d89b734d10f2
-
SSDEEP
49152:yCwsbCANnKXferL7Vwe/Gg0P+WhbLTwM6mn2G:Vws2ANnKXOaeOgmhPTwM6mn2G
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-