General
-
Target
8f69b50c068ba8c241438d853ee4aabd0e57900d9f84b92ceb3b8066c35b74e3
-
Size
7.0MB
-
Sample
240525-ymcg6sgb9w
-
MD5
c820f33f16c617ad9c5d4bad22e8ef73
-
SHA1
70e994ba806cae3642540f2e8dfcda96247c074f
-
SHA256
8f69b50c068ba8c241438d853ee4aabd0e57900d9f84b92ceb3b8066c35b74e3
-
SHA512
1a3d6dac6afc59ba84f84875f47ab07ac7367f851adfd6baddb6a76b7dc305782110a38a901932923e4a375f9524238d9ab326ea1529bfe0ab4546bc6f55a35d
-
SSDEEP
98304:ews2ANnKXOaeOgmhwUBUqoDwkYRzddiHP6nIFriWp86fv0o8j49Z5/xP:MKXbeO7bU2kQBdiHPtRT8o8sb59
Static task
static1
Behavioral task
behavioral1
Sample
8f69b50c068ba8c241438d853ee4aabd0e57900d9f84b92ceb3b8066c35b74e3.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
8f69b50c068ba8c241438d853ee4aabd0e57900d9f84b92ceb3b8066c35b74e3
-
Size
7.0MB
-
MD5
c820f33f16c617ad9c5d4bad22e8ef73
-
SHA1
70e994ba806cae3642540f2e8dfcda96247c074f
-
SHA256
8f69b50c068ba8c241438d853ee4aabd0e57900d9f84b92ceb3b8066c35b74e3
-
SHA512
1a3d6dac6afc59ba84f84875f47ab07ac7367f851adfd6baddb6a76b7dc305782110a38a901932923e4a375f9524238d9ab326ea1529bfe0ab4546bc6f55a35d
-
SSDEEP
98304:ews2ANnKXOaeOgmhwUBUqoDwkYRzddiHP6nIFriWp86fv0o8j49Z5/xP:MKXbeO7bU2kQBdiHPtRT8o8sb59
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Drops file in System32 directory
-