General
-
Target
3fa1b87f9f46a979f4724f9bc1fc0aa96496771d24a750a3fcb5f219e44095ce
-
Size
2.3MB
-
Sample
240526-j5eb6ada42
-
MD5
a6b78ec5db4768df31451196ba6d8fc8
-
SHA1
613d3e1ac815aa9e209cd32e36842e3f5db8c744
-
SHA256
3fa1b87f9f46a979f4724f9bc1fc0aa96496771d24a750a3fcb5f219e44095ce
-
SHA512
97c345153d32dbe307633e706d2773df149a5aa1c322d91e05023948a0618e4833450a9297491cdbdaac90f4c6b0c3882700fed22bb627a3e614e7b56a179538
-
SSDEEP
24576:4CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHx:4CwsbCANnKXferL7Vwe/Gg0P+WhCwE
Static task
static1
Behavioral task
behavioral1
Sample
3fa1b87f9f46a979f4724f9bc1fc0aa96496771d24a750a3fcb5f219e44095ce.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
3fa1b87f9f46a979f4724f9bc1fc0aa96496771d24a750a3fcb5f219e44095ce
-
Size
2.3MB
-
MD5
a6b78ec5db4768df31451196ba6d8fc8
-
SHA1
613d3e1ac815aa9e209cd32e36842e3f5db8c744
-
SHA256
3fa1b87f9f46a979f4724f9bc1fc0aa96496771d24a750a3fcb5f219e44095ce
-
SHA512
97c345153d32dbe307633e706d2773df149a5aa1c322d91e05023948a0618e4833450a9297491cdbdaac90f4c6b0c3882700fed22bb627a3e614e7b56a179538
-
SSDEEP
24576:4CwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHx:4CwsbCANnKXferL7Vwe/Gg0P+WhCwE
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-