General
-
Target
b2cb77a1bcfdcf5e9a0c19b8028730b025a3558c79e117e6779a058f8e1b0147
-
Size
3.2MB
-
Sample
240525-yagalaga75
-
MD5
7c33335b61f1daf9f0b4e1b887a27966
-
SHA1
27f7827f4fd343645bf6131c2f9b693aa5f52de5
-
SHA256
b2cb77a1bcfdcf5e9a0c19b8028730b025a3558c79e117e6779a058f8e1b0147
-
SHA512
26d9af547a273e991ca3ed02947f0cf2aad59de9e147faa90214d758100553cbd310d63f9e2faf42d939e3fa79b4b1ae4c7ba1c60e378354e5707873c201b24d
-
SSDEEP
49152:w09XJt4HIN2H2tFvduySSDmn2uWr1r9XtJ3jGsc0NytD889X3HVCDC:1ZJt4HINy2LkSDmn2uEBtJ3jGscPtRX
Static task
static1
Behavioral task
behavioral1
Sample
b2cb77a1bcfdcf5e9a0c19b8028730b025a3558c79e117e6779a058f8e1b0147.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
b2cb77a1bcfdcf5e9a0c19b8028730b025a3558c79e117e6779a058f8e1b0147
-
Size
3.2MB
-
MD5
7c33335b61f1daf9f0b4e1b887a27966
-
SHA1
27f7827f4fd343645bf6131c2f9b693aa5f52de5
-
SHA256
b2cb77a1bcfdcf5e9a0c19b8028730b025a3558c79e117e6779a058f8e1b0147
-
SHA512
26d9af547a273e991ca3ed02947f0cf2aad59de9e147faa90214d758100553cbd310d63f9e2faf42d939e3fa79b4b1ae4c7ba1c60e378354e5707873c201b24d
-
SSDEEP
49152:w09XJt4HIN2H2tFvduySSDmn2uWr1r9XtJ3jGsc0NytD889X3HVCDC:1ZJt4HINy2LkSDmn2uEBtJ3jGscPtRX
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-