General
-
Target
b10e20c356c254af8151a48c1d2878a227f22c5ee5d851189971215bc269fe9d
-
Size
2.4MB
-
Sample
240526-d9ssfsdf3y
-
MD5
b509294fb0703bc2e35e7b20f07de7fc
-
SHA1
74b76864f3f045ed1e2742cab5d5a0aca9bb55d5
-
SHA256
b10e20c356c254af8151a48c1d2878a227f22c5ee5d851189971215bc269fe9d
-
SHA512
2636997a929f16cba52b0e5ee58a58d5784c4eaff8570cdf468398864fb17ab3960370c3ea540a07b876b2fcbe423d8877a0862c7a374788d5911798d86811ec
-
SSDEEP
24576:ICwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH7:ICwsbCANnKXferL7Vwe/Gg0P+WhvhED
Static task
static1
Behavioral task
behavioral1
Sample
b10e20c356c254af8151a48c1d2878a227f22c5ee5d851189971215bc269fe9d.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
b10e20c356c254af8151a48c1d2878a227f22c5ee5d851189971215bc269fe9d
-
Size
2.4MB
-
MD5
b509294fb0703bc2e35e7b20f07de7fc
-
SHA1
74b76864f3f045ed1e2742cab5d5a0aca9bb55d5
-
SHA256
b10e20c356c254af8151a48c1d2878a227f22c5ee5d851189971215bc269fe9d
-
SHA512
2636997a929f16cba52b0e5ee58a58d5784c4eaff8570cdf468398864fb17ab3960370c3ea540a07b876b2fcbe423d8877a0862c7a374788d5911798d86811ec
-
SSDEEP
24576:ICwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH7:ICwsbCANnKXferL7Vwe/Gg0P+WhvhED
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-