General
-
Target
a94f166fb8f1288968754f523ccddc215b3c4061402f4ee7a4010f857a9039f7
-
Size
3.4MB
-
Sample
240525-s1steshb7w
-
MD5
a3d9224595dbb786b7b95e54a2216523
-
SHA1
0fc7cd5136febce9d4ce47ca17713d8eff53a0ff
-
SHA256
a94f166fb8f1288968754f523ccddc215b3c4061402f4ee7a4010f857a9039f7
-
SHA512
4b46c340b36a7feb185e02a5c3a8f396218c03178296cefb03115223f8b68dcf292d5b1c8e47bc3ddcaff03e19ac0851265119619fdddfdd4b0aa358dc0107c2
-
SSDEEP
49152:o09XJt4HIN2H2tFvduySXwXChnNRiecnAssQZj3Fl+s8KuqGaX0ToIBAUZLYu:NZJt4HINy2LkX0UnNnssQZ0JBAUZLB
Static task
static1
Behavioral task
behavioral1
Sample
a94f166fb8f1288968754f523ccddc215b3c4061402f4ee7a4010f857a9039f7.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
a94f166fb8f1288968754f523ccddc215b3c4061402f4ee7a4010f857a9039f7
-
Size
3.4MB
-
MD5
a3d9224595dbb786b7b95e54a2216523
-
SHA1
0fc7cd5136febce9d4ce47ca17713d8eff53a0ff
-
SHA256
a94f166fb8f1288968754f523ccddc215b3c4061402f4ee7a4010f857a9039f7
-
SHA512
4b46c340b36a7feb185e02a5c3a8f396218c03178296cefb03115223f8b68dcf292d5b1c8e47bc3ddcaff03e19ac0851265119619fdddfdd4b0aa358dc0107c2
-
SSDEEP
49152:o09XJt4HIN2H2tFvduySXwXChnNRiecnAssQZj3Fl+s8KuqGaX0ToIBAUZLYu:NZJt4HINy2LkX0UnNnssQZ0JBAUZLB
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-