General
-
Target
a3d26cc9f1ef31e2a93feee819d919794e6d797d5ef2d964d27707d619fe76c9
-
Size
1.3MB
-
Sample
240525-yk84csgb51
-
MD5
0a3d6dd2012f69d73f54efae7435bb26
-
SHA1
0047c26fd0e361c63afda409cf16080dc5f1f4be
-
SHA256
a3d26cc9f1ef31e2a93feee819d919794e6d797d5ef2d964d27707d619fe76c9
-
SHA512
4c4b6bb587aff9fe29f6a9916a4bcb55e3f493680be5aed67f3c6b44768b9db1cb802354e3138bbdfebc6474c0bd467f06e45fbe3011e989c89c1258f4fd9a8c
-
SSDEEP
24576:l09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+mC:l09XJt4HIN2H2tFvduySP
Static task
static1
Behavioral task
behavioral1
Sample
a3d26cc9f1ef31e2a93feee819d919794e6d797d5ef2d964d27707d619fe76c9.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
a3d26cc9f1ef31e2a93feee819d919794e6d797d5ef2d964d27707d619fe76c9
-
Size
1.3MB
-
MD5
0a3d6dd2012f69d73f54efae7435bb26
-
SHA1
0047c26fd0e361c63afda409cf16080dc5f1f4be
-
SHA256
a3d26cc9f1ef31e2a93feee819d919794e6d797d5ef2d964d27707d619fe76c9
-
SHA512
4c4b6bb587aff9fe29f6a9916a4bcb55e3f493680be5aed67f3c6b44768b9db1cb802354e3138bbdfebc6474c0bd467f06e45fbe3011e989c89c1258f4fd9a8c
-
SSDEEP
24576:l09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+mC:l09XJt4HIN2H2tFvduySP
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-