General
-
Target
6185104d3d0fb759a7260ec4f07c19dc920af6d199dae7468f16a58d07567ab5
-
Size
2.5MB
-
Sample
240525-xfwf2aeb5x
-
MD5
b85652613aff0a35266b7d9f769da8e1
-
SHA1
3db52682bf92637d2c7c8a53d64e5c36abe60884
-
SHA256
6185104d3d0fb759a7260ec4f07c19dc920af6d199dae7468f16a58d07567ab5
-
SHA512
58d50b15cdef6e45caff2cb6534675e4e473cb34c9f3ab1749d6c9f999c0eba32a358b562279e77c6de40a62d632079b65e03f23049eaa77f9d5997ae3f95234
-
SSDEEP
24576:bCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHy:bCwsbCANnKXferL7Vwe/Gg0P+Wh1
Static task
static1
Behavioral task
behavioral1
Sample
6185104d3d0fb759a7260ec4f07c19dc920af6d199dae7468f16a58d07567ab5.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
6185104d3d0fb759a7260ec4f07c19dc920af6d199dae7468f16a58d07567ab5
-
Size
2.5MB
-
MD5
b85652613aff0a35266b7d9f769da8e1
-
SHA1
3db52682bf92637d2c7c8a53d64e5c36abe60884
-
SHA256
6185104d3d0fb759a7260ec4f07c19dc920af6d199dae7468f16a58d07567ab5
-
SHA512
58d50b15cdef6e45caff2cb6534675e4e473cb34c9f3ab1749d6c9f999c0eba32a358b562279e77c6de40a62d632079b65e03f23049eaa77f9d5997ae3f95234
-
SSDEEP
24576:bCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHy:bCwsbCANnKXferL7Vwe/Gg0P+Wh1
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-