General
-
Target
64d4b87645b0ad7850630bef449028267167a263697f7349345ae263d1ad19e7
-
Size
2.7MB
-
Sample
240525-ycr5wafg2s
-
MD5
f47ede11569972294f0c6e14abc1ed5d
-
SHA1
716f0395d5ed6471f333bb637bf6616f99f778c1
-
SHA256
64d4b87645b0ad7850630bef449028267167a263697f7349345ae263d1ad19e7
-
SHA512
01b9065a2bbce1b03693d7ddeb8238d32db8387e3a33cbe4dd0faa403e071f123d2369681c5920badb806c4fec8a1e27bd3b0fa9736223697a64e816fb134419
-
SSDEEP
49152:qCwsbCANnKXferL7Vwe/Gg0P+WhbisABTue:9ws2ANnKXOaeOgmhbi1BTue
Static task
static1
Behavioral task
behavioral1
Sample
64d4b87645b0ad7850630bef449028267167a263697f7349345ae263d1ad19e7.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
64d4b87645b0ad7850630bef449028267167a263697f7349345ae263d1ad19e7
-
Size
2.7MB
-
MD5
f47ede11569972294f0c6e14abc1ed5d
-
SHA1
716f0395d5ed6471f333bb637bf6616f99f778c1
-
SHA256
64d4b87645b0ad7850630bef449028267167a263697f7349345ae263d1ad19e7
-
SHA512
01b9065a2bbce1b03693d7ddeb8238d32db8387e3a33cbe4dd0faa403e071f123d2369681c5920badb806c4fec8a1e27bd3b0fa9736223697a64e816fb134419
-
SSDEEP
49152:qCwsbCANnKXferL7Vwe/Gg0P+WhbisABTue:9ws2ANnKXOaeOgmhbi1BTue
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-