General
-
Target
c14e36d2229761e83018e1eae711d05bd6f23e5e00c58f4251a21db72a15b3fc
-
Size
15.3MB
-
Sample
240525-wkwf6acf4x
-
MD5
a18c8c88affa0af81c53536b0f6da07c
-
SHA1
61b208ff2b36b25eed2b391ad82a602166b41c45
-
SHA256
c14e36d2229761e83018e1eae711d05bd6f23e5e00c58f4251a21db72a15b3fc
-
SHA512
fb1b4f86d26104c2d9d5796a3a0156fe600b1bf52669a7b23f96e8c2beba1b6ef045f8346a20687cc3043edfd895344334a0a9a50ff2d9f7ba3fa2d7707dfc39
-
SSDEEP
393216:67mcg4y9M7TOC4cThkIRWwE2r6KWqdWq:Kz09c62hDx6KWqdWq
Static task
static1
Behavioral task
behavioral1
Sample
c14e36d2229761e83018e1eae711d05bd6f23e5e00c58f4251a21db72a15b3fc.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
c14e36d2229761e83018e1eae711d05bd6f23e5e00c58f4251a21db72a15b3fc
-
Size
15.3MB
-
MD5
a18c8c88affa0af81c53536b0f6da07c
-
SHA1
61b208ff2b36b25eed2b391ad82a602166b41c45
-
SHA256
c14e36d2229761e83018e1eae711d05bd6f23e5e00c58f4251a21db72a15b3fc
-
SHA512
fb1b4f86d26104c2d9d5796a3a0156fe600b1bf52669a7b23f96e8c2beba1b6ef045f8346a20687cc3043edfd895344334a0a9a50ff2d9f7ba3fa2d7707dfc39
-
SSDEEP
393216:67mcg4y9M7TOC4cThkIRWwE2r6KWqdWq:Kz09c62hDx6KWqdWq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-