General
-
Target
f81197d970cb798c9be40ca2754bbef2332d9230a204881ff60cf90f4061c444
-
Size
1.8MB
-
Sample
240525-wqka3sch4s
-
MD5
7c58e6ac0c36f48e40d9a8f1372a6d79
-
SHA1
afb3204bf29c42d3554f41bc543dd16c05fffdc7
-
SHA256
f81197d970cb798c9be40ca2754bbef2332d9230a204881ff60cf90f4061c444
-
SHA512
5e38c0e38beac9f2e5bf3cf7fba91ee0b95f5d392071f25e8b0a59b79b2fa53f122c94e7b6f9444fb3d75b3198a1e2f87460f324f0d3e37588fd81107ffa07a4
-
SSDEEP
49152:kQZAdVyVT9n/Gg0P+Who7Jyn2jnZebm5cEjuU:1GdVyVT9nOgmh0Jyn2r8btEp
Static task
static1
Behavioral task
behavioral1
Sample
f81197d970cb798c9be40ca2754bbef2332d9230a204881ff60cf90f4061c444.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
f81197d970cb798c9be40ca2754bbef2332d9230a204881ff60cf90f4061c444
-
Size
1.8MB
-
MD5
7c58e6ac0c36f48e40d9a8f1372a6d79
-
SHA1
afb3204bf29c42d3554f41bc543dd16c05fffdc7
-
SHA256
f81197d970cb798c9be40ca2754bbef2332d9230a204881ff60cf90f4061c444
-
SHA512
5e38c0e38beac9f2e5bf3cf7fba91ee0b95f5d392071f25e8b0a59b79b2fa53f122c94e7b6f9444fb3d75b3198a1e2f87460f324f0d3e37588fd81107ffa07a4
-
SSDEEP
49152:kQZAdVyVT9n/Gg0P+Who7Jyn2jnZebm5cEjuU:1GdVyVT9nOgmh0Jyn2r8btEp
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-