General
-
Target
bd60503cd7423504b9dbf7176d54ea39fbeaf7afa66a0749621af0aea4ae21d7
-
Size
2.5MB
-
Sample
240526-eh7mzaeg92
-
MD5
ecd0f1d2366c84062cc21e5ffa978ad8
-
SHA1
a9557fb7e37bdcf4d4fc2211d8901be0e7af9b5c
-
SHA256
bd60503cd7423504b9dbf7176d54ea39fbeaf7afa66a0749621af0aea4ae21d7
-
SHA512
615aa059d5e30ab975d0feacb97f07bec65b1e987e09248330217114671bc6c4f280dee325e71a2d3c4215215c18038c90407bc886b84a2c51149526dd220a8a
-
SSDEEP
24576:xCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHN:xCwsbCANnKXferL7Vwe/Gg0P+WhkYw
Static task
static1
Behavioral task
behavioral1
Sample
bd60503cd7423504b9dbf7176d54ea39fbeaf7afa66a0749621af0aea4ae21d7.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
bd60503cd7423504b9dbf7176d54ea39fbeaf7afa66a0749621af0aea4ae21d7
-
Size
2.5MB
-
MD5
ecd0f1d2366c84062cc21e5ffa978ad8
-
SHA1
a9557fb7e37bdcf4d4fc2211d8901be0e7af9b5c
-
SHA256
bd60503cd7423504b9dbf7176d54ea39fbeaf7afa66a0749621af0aea4ae21d7
-
SHA512
615aa059d5e30ab975d0feacb97f07bec65b1e987e09248330217114671bc6c4f280dee325e71a2d3c4215215c18038c90407bc886b84a2c51149526dd220a8a
-
SSDEEP
24576:xCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHN:xCwsbCANnKXferL7Vwe/Gg0P+WhkYw
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-