General
-
Target
560c591e311116b8d75ab1a532d2af43a3a05ad5920b674de35c9432259058b9
-
Size
716KB
-
Sample
240525-vk4xvsbg56
-
MD5
2a78142d0ce63dce1277b4279fa9a2d2
-
SHA1
711233db12082a68db7260f61785297a27f32bf3
-
SHA256
560c591e311116b8d75ab1a532d2af43a3a05ad5920b674de35c9432259058b9
-
SHA512
be943b4db564bde952628ffa4628710b45fa98c993344f288984927921fa2d7f97fae7cd4bb26c7e995a8f78833eca2cd24f8b56948cc6ef798b14930c6080ec
-
SSDEEP
12288:+i2cAro2HQVWAHkFSq2hAWJYlMUtrxlyuJVRe8yIMIEy8gscs:+i2Tro2H2HESq2eWJ6MQjySjyIMF
Static task
static1
Behavioral task
behavioral1
Sample
560c591e311116b8d75ab1a532d2af43a3a05ad5920b674de35c9432259058b9.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
560c591e311116b8d75ab1a532d2af43a3a05ad5920b674de35c9432259058b9
-
Size
716KB
-
MD5
2a78142d0ce63dce1277b4279fa9a2d2
-
SHA1
711233db12082a68db7260f61785297a27f32bf3
-
SHA256
560c591e311116b8d75ab1a532d2af43a3a05ad5920b674de35c9432259058b9
-
SHA512
be943b4db564bde952628ffa4628710b45fa98c993344f288984927921fa2d7f97fae7cd4bb26c7e995a8f78833eca2cd24f8b56948cc6ef798b14930c6080ec
-
SSDEEP
12288:+i2cAro2HQVWAHkFSq2hAWJYlMUtrxlyuJVRe8yIMIEy8gscs:+i2Tro2H2HESq2eWJ6MQjySjyIMF
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-