General
-
Target
f206d37e249162a5cbb1b71671efec459d20c9f7ed5728ef3aaa9171aa92f081
-
Size
732KB
-
Sample
240526-gpn6bahb91
-
MD5
1cd9d884da7e2e2c78bd9db07dd521b2
-
SHA1
f8880d3e5f1d70a02503ee3b55e9469b90b12115
-
SHA256
f206d37e249162a5cbb1b71671efec459d20c9f7ed5728ef3aaa9171aa92f081
-
SHA512
a7361de195cedf12793f61c9aa2e79d55e31e7359f1e537fee0ee502efe8536abbf7f7db5ea5621d6700f968e04c535ce7986634d7fe6744990bbe8527225a73
-
SSDEEP
12288:qi2cAro2HQVWAHkFSq2hAWJYlMUtrxlyuJVRe8ycjzqYMxyXRP6Kff:qi2Tro2H2HESq2eWJ6MQjySjycjzV/Em
Static task
static1
Behavioral task
behavioral1
Sample
f206d37e249162a5cbb1b71671efec459d20c9f7ed5728ef3aaa9171aa92f081.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
f206d37e249162a5cbb1b71671efec459d20c9f7ed5728ef3aaa9171aa92f081
-
Size
732KB
-
MD5
1cd9d884da7e2e2c78bd9db07dd521b2
-
SHA1
f8880d3e5f1d70a02503ee3b55e9469b90b12115
-
SHA256
f206d37e249162a5cbb1b71671efec459d20c9f7ed5728ef3aaa9171aa92f081
-
SHA512
a7361de195cedf12793f61c9aa2e79d55e31e7359f1e537fee0ee502efe8536abbf7f7db5ea5621d6700f968e04c535ce7986634d7fe6744990bbe8527225a73
-
SSDEEP
12288:qi2cAro2HQVWAHkFSq2hAWJYlMUtrxlyuJVRe8ycjzqYMxyXRP6Kff:qi2Tro2H2HESq2eWJ6MQjySjycjzV/Em
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-