General
-
Target
99b5dd604d4693bb54972d7d2d6069a95dc59ffdf74d130ec789555f5e45ca07
-
Size
1.9MB
-
Sample
240525-xhmlxaec4v
-
MD5
d3a55a324587dd64246027d666b9050f
-
SHA1
77d9da6d0e0eec66db69800ab1ee1148be5c37f4
-
SHA256
99b5dd604d4693bb54972d7d2d6069a95dc59ffdf74d130ec789555f5e45ca07
-
SHA512
5f8f7de5081a842a2a3d4e7d7d25ab445b9e2c2e1be781cf9f783380363de3a2bf5d455f16a630796c54d5ed4218b4ea96e1220d0d5a2c34f06335d7206e9cf4
-
SSDEEP
49152:QQZAdVyVT9n/Gg0P+WhoLpe/ZPItx2apeapelI:5GdVyVT9nOgmhbitUvlI
Static task
static1
Behavioral task
behavioral1
Sample
99b5dd604d4693bb54972d7d2d6069a95dc59ffdf74d130ec789555f5e45ca07.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
99b5dd604d4693bb54972d7d2d6069a95dc59ffdf74d130ec789555f5e45ca07
-
Size
1.9MB
-
MD5
d3a55a324587dd64246027d666b9050f
-
SHA1
77d9da6d0e0eec66db69800ab1ee1148be5c37f4
-
SHA256
99b5dd604d4693bb54972d7d2d6069a95dc59ffdf74d130ec789555f5e45ca07
-
SHA512
5f8f7de5081a842a2a3d4e7d7d25ab445b9e2c2e1be781cf9f783380363de3a2bf5d455f16a630796c54d5ed4218b4ea96e1220d0d5a2c34f06335d7206e9cf4
-
SSDEEP
49152:QQZAdVyVT9n/Gg0P+WhoLpe/ZPItx2apeapelI:5GdVyVT9nOgmhbitUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-