General
-
Target
d29fe36e9448660709c62c91096f97534ed827d694170a90b8d3082f2aaeff38
-
Size
2.1MB
-
Sample
240525-wma81adb83
-
MD5
9fee34f79334e8bd1c75aead4d754e75
-
SHA1
4c2135bd5d60269ebcee3331e5146218622c784b
-
SHA256
d29fe36e9448660709c62c91096f97534ed827d694170a90b8d3082f2aaeff38
-
SHA512
2ef171de0af30e61d5c097305b76261e7037f55abbddf438216381512c4c800250042996c16a31bcc29c1d207b735712cb5642bcd7dc893eb0d8facb9617c510
-
SSDEEP
49152:NQZAdVyVT9n/Gg0P+WhokpeHvfKIZPItx2apeapelI:WGdVyVT9nOgmhWqRtUvlI
Static task
static1
Behavioral task
behavioral1
Sample
d29fe36e9448660709c62c91096f97534ed827d694170a90b8d3082f2aaeff38.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
d29fe36e9448660709c62c91096f97534ed827d694170a90b8d3082f2aaeff38
-
Size
2.1MB
-
MD5
9fee34f79334e8bd1c75aead4d754e75
-
SHA1
4c2135bd5d60269ebcee3331e5146218622c784b
-
SHA256
d29fe36e9448660709c62c91096f97534ed827d694170a90b8d3082f2aaeff38
-
SHA512
2ef171de0af30e61d5c097305b76261e7037f55abbddf438216381512c4c800250042996c16a31bcc29c1d207b735712cb5642bcd7dc893eb0d8facb9617c510
-
SSDEEP
49152:NQZAdVyVT9n/Gg0P+WhokpeHvfKIZPItx2apeapelI:WGdVyVT9nOgmhWqRtUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-