General
-
Target
779639d7640ae2773adfb967bef37cdcd7a7d41d707a720d5f79552ff6e72e7d
-
Size
1.6MB
-
Sample
240526-g6az1shg51
-
MD5
6f19622cca29114d2d4b8aafe5466352
-
SHA1
45fd33465d816d70a6961a9d11fcab64ef755fa6
-
SHA256
779639d7640ae2773adfb967bef37cdcd7a7d41d707a720d5f79552ff6e72e7d
-
SHA512
3936fda7a02c2e7dbf958203de5057bf8111354d5ad971c22f31d02721093cad7265e67a4886ba90787ff4281b4dd3e8509d381b0ee68d744bcbb1bcd28bd13d
-
SSDEEP
24576:fQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVcGV1Dfun2s:fQZAdVyVT9n/Gg0P+WhouDmn2s
Static task
static1
Behavioral task
behavioral1
Sample
779639d7640ae2773adfb967bef37cdcd7a7d41d707a720d5f79552ff6e72e7d.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
779639d7640ae2773adfb967bef37cdcd7a7d41d707a720d5f79552ff6e72e7d
-
Size
1.6MB
-
MD5
6f19622cca29114d2d4b8aafe5466352
-
SHA1
45fd33465d816d70a6961a9d11fcab64ef755fa6
-
SHA256
779639d7640ae2773adfb967bef37cdcd7a7d41d707a720d5f79552ff6e72e7d
-
SHA512
3936fda7a02c2e7dbf958203de5057bf8111354d5ad971c22f31d02721093cad7265e67a4886ba90787ff4281b4dd3e8509d381b0ee68d744bcbb1bcd28bd13d
-
SSDEEP
24576:fQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVcGV1Dfun2s:fQZAdVyVT9n/Gg0P+WhouDmn2s
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-