General
-
Target
7f6fdc6ffdab93c788c5c035fcfc8d1d9ce390e9db7a56f20a4db71b015ebaa5
-
Size
2.7MB
-
Sample
240526-lth73seh52
-
MD5
f1d5b339a097e384d5955e471b579b0a
-
SHA1
2010fd57ce5831686f0a94228a868adddb4c3519
-
SHA256
7f6fdc6ffdab93c788c5c035fcfc8d1d9ce390e9db7a56f20a4db71b015ebaa5
-
SHA512
648b83b28f4087a1ca430b03052155a265d8fd6f878479ae7fa6012e9db9e816d33e6cc51db2b99d41f1183c83532c7eabbc9834dd97a0126cf72503928dba7e
-
SSDEEP
24576:ZCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH7:ZCwsbCANnKXferL7Vwe/Gg0P+WhRW
Static task
static1
Behavioral task
behavioral1
Sample
7f6fdc6ffdab93c788c5c035fcfc8d1d9ce390e9db7a56f20a4db71b015ebaa5.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
7f6fdc6ffdab93c788c5c035fcfc8d1d9ce390e9db7a56f20a4db71b015ebaa5
-
Size
2.7MB
-
MD5
f1d5b339a097e384d5955e471b579b0a
-
SHA1
2010fd57ce5831686f0a94228a868adddb4c3519
-
SHA256
7f6fdc6ffdab93c788c5c035fcfc8d1d9ce390e9db7a56f20a4db71b015ebaa5
-
SHA512
648b83b28f4087a1ca430b03052155a265d8fd6f878479ae7fa6012e9db9e816d33e6cc51db2b99d41f1183c83532c7eabbc9834dd97a0126cf72503928dba7e
-
SSDEEP
24576:ZCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH7:ZCwsbCANnKXferL7Vwe/Gg0P+WhRW
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-