General
-
Target
bfdb203e9a3f26320237a72030dcae58e0a2760ffae9b801e161762ecf7efdbc
-
Size
12.0MB
-
Sample
240526-ftzl6sgh56
-
MD5
644d1350d5dcee23c20fbde64aa26fd3
-
SHA1
03a8cd11d332e03ab5f998c329fe083b4daf31d0
-
SHA256
bfdb203e9a3f26320237a72030dcae58e0a2760ffae9b801e161762ecf7efdbc
-
SHA512
0d939455ff91fdeef9bce396d25041bddf55e27ce00421d73a6be024f0d7ec19e06a84fb423855491e748f16e7027e7347b806346fe5cf28426254b3176fa76d
-
SSDEEP
196608:RWT9nO7sol7S757W0Y4bNscBJeJt/crCahf/aEEG6NZLwVnyg+BDPsOx+iu4jn9Z:j7sol7S5BDEJt/crCmHREGqwVS+XOn9Z
Static task
static1
Behavioral task
behavioral1
Sample
bfdb203e9a3f26320237a72030dcae58e0a2760ffae9b801e161762ecf7efdbc.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
bfdb203e9a3f26320237a72030dcae58e0a2760ffae9b801e161762ecf7efdbc
-
Size
12.0MB
-
MD5
644d1350d5dcee23c20fbde64aa26fd3
-
SHA1
03a8cd11d332e03ab5f998c329fe083b4daf31d0
-
SHA256
bfdb203e9a3f26320237a72030dcae58e0a2760ffae9b801e161762ecf7efdbc
-
SHA512
0d939455ff91fdeef9bce396d25041bddf55e27ce00421d73a6be024f0d7ec19e06a84fb423855491e748f16e7027e7347b806346fe5cf28426254b3176fa76d
-
SSDEEP
196608:RWT9nO7sol7S757W0Y4bNscBJeJt/crCahf/aEEG6NZLwVnyg+BDPsOx+iu4jn9Z:j7sol7S5BDEJt/crCmHREGqwVS+XOn9Z
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-