General
-
Target
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b
-
Size
1.2MB
-
Sample
240525-wfhdqsch64
-
MD5
940c92183c07ef54f9d7e7f484c61009
-
SHA1
8a396b4753a4bdb57ad205f626f43a5b252623a6
-
SHA256
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b
-
SHA512
b8e4acbbc9d2622a6a7883198302223aa2d92a35cf0b217047e9abb1adf5e6240db17e7963b5a29cd9bccd5377aa1eb5a94a98bf2aa13d7e08195646452b8ec9
-
SSDEEP
24576:aYFbkIsaPiXSVnC7Yp9zkNmZG8RRlngyzX:aYREXSVMDi3r
Static task
static1
Behavioral task
behavioral1
Sample
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b
-
Size
1.2MB
-
MD5
940c92183c07ef54f9d7e7f484c61009
-
SHA1
8a396b4753a4bdb57ad205f626f43a5b252623a6
-
SHA256
9901f5b25e05cf692590795f405a8e06c4012e64c2ddd8b60a4889571346f35b
-
SHA512
b8e4acbbc9d2622a6a7883198302223aa2d92a35cf0b217047e9abb1adf5e6240db17e7963b5a29cd9bccd5377aa1eb5a94a98bf2aa13d7e08195646452b8ec9
-
SSDEEP
24576:aYFbkIsaPiXSVnC7Yp9zkNmZG8RRlngyzX:aYREXSVMDi3r
Score10/10-
Gh0st RAT payload
-
Sets DLL path for service in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-