General
-
Target
1d066e8f721c20863181bc0a887f6472ccf4e825aed522d1e8bc01bd7af145f8
-
Size
2.7MB
-
Sample
240526-jknp4abe7w
-
MD5
94ad1ae7351f875917174e23674d8236
-
SHA1
9926e34007074f712288ccd4bb5f296d90871113
-
SHA256
1d066e8f721c20863181bc0a887f6472ccf4e825aed522d1e8bc01bd7af145f8
-
SHA512
dfc0e476bd034fc32af3c20f6972fd5d0018f49fb4e2d572a62a861fca992d1ea4d136d1ac3c607a4358ba132f39ff781b8f6c51bfddf98f86b414c96a339f27
-
SSDEEP
49152:GCwsbCANnKXferL7Vwe/Gg0P+Who6K7cg/OU7QI:xws2ANnKXOaeOgmhxKd/b
Static task
static1
Behavioral task
behavioral1
Sample
1d066e8f721c20863181bc0a887f6472ccf4e825aed522d1e8bc01bd7af145f8.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
1d066e8f721c20863181bc0a887f6472ccf4e825aed522d1e8bc01bd7af145f8
-
Size
2.7MB
-
MD5
94ad1ae7351f875917174e23674d8236
-
SHA1
9926e34007074f712288ccd4bb5f296d90871113
-
SHA256
1d066e8f721c20863181bc0a887f6472ccf4e825aed522d1e8bc01bd7af145f8
-
SHA512
dfc0e476bd034fc32af3c20f6972fd5d0018f49fb4e2d572a62a861fca992d1ea4d136d1ac3c607a4358ba132f39ff781b8f6c51bfddf98f86b414c96a339f27
-
SSDEEP
49152:GCwsbCANnKXferL7Vwe/Gg0P+Who6K7cg/OU7QI:xws2ANnKXOaeOgmhxKd/b
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-