General
-
Target
16c9ce3d4d8518e1acc2b9596042224e836bb3e704c1fa0349b5d5ec6fa3d2e8
-
Size
1.8MB
-
Sample
240526-fsyy9agg93
-
MD5
4486f3cff55a579b3d14f469deb00373
-
SHA1
d024c5ccce4025d315ad442ffb36629c5a389e8b
-
SHA256
16c9ce3d4d8518e1acc2b9596042224e836bb3e704c1fa0349b5d5ec6fa3d2e8
-
SHA512
596d83f5395b6f073a0550b510c1df30cca575ca660a76f10cfeef074fd42eb965fac75bdee40e8ae5b2db1343fe9daee4096a9ded93f6acdb94970a98703d87
-
SSDEEP
24576:LQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cV1/uMWzWLG:LQZAdVyVT9n/Gg0P+WhovzWLG
Static task
static1
Behavioral task
behavioral1
Sample
16c9ce3d4d8518e1acc2b9596042224e836bb3e704c1fa0349b5d5ec6fa3d2e8.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
16c9ce3d4d8518e1acc2b9596042224e836bb3e704c1fa0349b5d5ec6fa3d2e8
-
Size
1.8MB
-
MD5
4486f3cff55a579b3d14f469deb00373
-
SHA1
d024c5ccce4025d315ad442ffb36629c5a389e8b
-
SHA256
16c9ce3d4d8518e1acc2b9596042224e836bb3e704c1fa0349b5d5ec6fa3d2e8
-
SHA512
596d83f5395b6f073a0550b510c1df30cca575ca660a76f10cfeef074fd42eb965fac75bdee40e8ae5b2db1343fe9daee4096a9ded93f6acdb94970a98703d87
-
SSDEEP
24576:LQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cV1/uMWzWLG:LQZAdVyVT9n/Gg0P+WhovzWLG
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-