General
-
Target
4b91356d2e007c76e0511ad3cbc2328e5c30411391ff8e70de504ad8b13e76c9
-
Size
7.1MB
-
Sample
240526-jzj1fsch28
-
MD5
e6de5681c65860800e5c15b70100eea0
-
SHA1
19d13e93d8311f6313d1522cdc4ac8ab53c742b3
-
SHA256
4b91356d2e007c76e0511ad3cbc2328e5c30411391ff8e70de504ad8b13e76c9
-
SHA512
563d54661e86fcc4d4ad167cd9257b50db16aa78a6943704e66c21e7453674ac08f60e3de3dbad6989c21eb29a4f5b9a21cd88a0e15358ca25a0dd5d36b836d6
-
SSDEEP
196608:Vy2LkNdRnR2XCvEED4ruT8DqtCf1wvLsnsQx:Q5R+CcoQttf1wvQns
Behavioral task
behavioral1
Sample
4b91356d2e007c76e0511ad3cbc2328e5c30411391ff8e70de504ad8b13e76c9.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
4b91356d2e007c76e0511ad3cbc2328e5c30411391ff8e70de504ad8b13e76c9
-
Size
7.1MB
-
MD5
e6de5681c65860800e5c15b70100eea0
-
SHA1
19d13e93d8311f6313d1522cdc4ac8ab53c742b3
-
SHA256
4b91356d2e007c76e0511ad3cbc2328e5c30411391ff8e70de504ad8b13e76c9
-
SHA512
563d54661e86fcc4d4ad167cd9257b50db16aa78a6943704e66c21e7453674ac08f60e3de3dbad6989c21eb29a4f5b9a21cd88a0e15358ca25a0dd5d36b836d6
-
SSDEEP
196608:Vy2LkNdRnR2XCvEED4ruT8DqtCf1wvLsnsQx:Q5R+CcoQttf1wvQns
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-