General
-
Target
4cefeb3855902fe16aa3eb6d5a2a9be447d803610dca3848a22e0b5d0112e8cc
-
Size
1.3MB
-
Sample
240525-1lc4esca65
-
MD5
db81fa8ee82e03e61a64692fc141fbdd
-
SHA1
805b9bb679dd448429d77198075a11f9a6e856cc
-
SHA256
4cefeb3855902fe16aa3eb6d5a2a9be447d803610dca3848a22e0b5d0112e8cc
-
SHA512
c3d3794a69ecb996d0635cd48b87ec0680057af77729230d8609124dd60ea5a64b7d2aac8c00484ff3dcb386b5c41e40003eeea3b558eb7d84ca094fb2bb6d4c
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNU:QHPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
4cefeb3855902fe16aa3eb6d5a2a9be447d803610dca3848a22e0b5d0112e8cc.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
4cefeb3855902fe16aa3eb6d5a2a9be447d803610dca3848a22e0b5d0112e8cc
-
Size
1.3MB
-
MD5
db81fa8ee82e03e61a64692fc141fbdd
-
SHA1
805b9bb679dd448429d77198075a11f9a6e856cc
-
SHA256
4cefeb3855902fe16aa3eb6d5a2a9be447d803610dca3848a22e0b5d0112e8cc
-
SHA512
c3d3794a69ecb996d0635cd48b87ec0680057af77729230d8609124dd60ea5a64b7d2aac8c00484ff3dcb386b5c41e40003eeea3b558eb7d84ca094fb2bb6d4c
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNU:QHPkVOBTK
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-