General
-
Target
2cc52b16ca9f41a3f9ea0c0ef0e50d5b65240e9b15d82626d01dd471e131a6c8
-
Size
3.4MB
-
Sample
240526-fkjjlaff9v
-
MD5
af7defd6fed54867d3de8c3c3ab27f24
-
SHA1
d2d64a88c72f3a231667bbebe38e9a38abbc6694
-
SHA256
2cc52b16ca9f41a3f9ea0c0ef0e50d5b65240e9b15d82626d01dd471e131a6c8
-
SHA512
77ed500a3b67bbf573b43d819ed21fade2405ac7b1a66a00255d1638be68139b3ff9c627182751fb3ddeeb910d3f51ee0bef5e6ef21dbfe1b8ab1d1a94b6db4a
-
SSDEEP
49152:HCwsbCANnKXferL7Vwe/Gg0P+WhbJ/f86Oxtoq:iws2ANnKXOaeOgmhbJRQj
Static task
static1
Behavioral task
behavioral1
Sample
2cc52b16ca9f41a3f9ea0c0ef0e50d5b65240e9b15d82626d01dd471e131a6c8.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
2cc52b16ca9f41a3f9ea0c0ef0e50d5b65240e9b15d82626d01dd471e131a6c8
-
Size
3.4MB
-
MD5
af7defd6fed54867d3de8c3c3ab27f24
-
SHA1
d2d64a88c72f3a231667bbebe38e9a38abbc6694
-
SHA256
2cc52b16ca9f41a3f9ea0c0ef0e50d5b65240e9b15d82626d01dd471e131a6c8
-
SHA512
77ed500a3b67bbf573b43d819ed21fade2405ac7b1a66a00255d1638be68139b3ff9c627182751fb3ddeeb910d3f51ee0bef5e6ef21dbfe1b8ab1d1a94b6db4a
-
SSDEEP
49152:HCwsbCANnKXferL7Vwe/Gg0P+WhbJ/f86Oxtoq:iws2ANnKXOaeOgmhbJRQj
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-