General
-
Target
ac80d05ad1d719520a910fcef864786852a6c348384ce28dbd948ede8b631c9b
-
Size
14.2MB
-
Sample
240525-vyej5acc42
-
MD5
a6ba7e81df55cc59a3b1e587cce13869
-
SHA1
4aa44ea32be6a488c7717d0a63ddbb54768e4dcf
-
SHA256
ac80d05ad1d719520a910fcef864786852a6c348384ce28dbd948ede8b631c9b
-
SHA512
91daf9eebc26b31b795a88a38ec97b3e992f9ab2a3c9b18bfba5a74dfc1e618cf68edc9300f6b2f1256de3baa3f2e432491dcb0b64627c3561124c5a312c7717
-
SSDEEP
196608:7KXbeO7fTfuwEIzl9XpvWk+qBeNgoDkeJZhhAXGYftmg2/mnrsZNijfwj8HiqGCr:Q7fL3Eyl9XhWk+qhoIh8gnnozi0gbve2
Static task
static1
Behavioral task
behavioral1
Sample
ac80d05ad1d719520a910fcef864786852a6c348384ce28dbd948ede8b631c9b.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
ac80d05ad1d719520a910fcef864786852a6c348384ce28dbd948ede8b631c9b
-
Size
14.2MB
-
MD5
a6ba7e81df55cc59a3b1e587cce13869
-
SHA1
4aa44ea32be6a488c7717d0a63ddbb54768e4dcf
-
SHA256
ac80d05ad1d719520a910fcef864786852a6c348384ce28dbd948ede8b631c9b
-
SHA512
91daf9eebc26b31b795a88a38ec97b3e992f9ab2a3c9b18bfba5a74dfc1e618cf68edc9300f6b2f1256de3baa3f2e432491dcb0b64627c3561124c5a312c7717
-
SSDEEP
196608:7KXbeO7fTfuwEIzl9XpvWk+qBeNgoDkeJZhhAXGYftmg2/mnrsZNijfwj8HiqGCr:Q7fL3Eyl9XhWk+qhoIh8gnnozi0gbve2
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-