General
-
Target
687402ef4bddc932e77b6f047f1eea9c910e99b971be59dd132ec48e64dd3201
-
Size
11.6MB
-
Sample
240526-lz5y2aed6s
-
MD5
c4ee890ff6d7d6e6ffbbbfb9187b3084
-
SHA1
39c8c28d6f13709d52eb5f7eedc5f8663f53a737
-
SHA256
687402ef4bddc932e77b6f047f1eea9c910e99b971be59dd132ec48e64dd3201
-
SHA512
5db0d26015231b9588db65d6e960509e726c1c83ab3c83d9d501b7718d892812b707b66d2c43674e030bbdcc40f83c3efc529d9aa606148bf0ec7a462db5956c
-
SSDEEP
196608:PKXbeO7+kcGqENeEHRFmNC3MQ5bi3sXx3s2f7cCRazO4xyrMr3SXlhetL:M7OkgEHRcNKMQY3sXx82fwysxyor39
Static task
static1
Behavioral task
behavioral1
Sample
687402ef4bddc932e77b6f047f1eea9c910e99b971be59dd132ec48e64dd3201.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
687402ef4bddc932e77b6f047f1eea9c910e99b971be59dd132ec48e64dd3201
-
Size
11.6MB
-
MD5
c4ee890ff6d7d6e6ffbbbfb9187b3084
-
SHA1
39c8c28d6f13709d52eb5f7eedc5f8663f53a737
-
SHA256
687402ef4bddc932e77b6f047f1eea9c910e99b971be59dd132ec48e64dd3201
-
SHA512
5db0d26015231b9588db65d6e960509e726c1c83ab3c83d9d501b7718d892812b707b66d2c43674e030bbdcc40f83c3efc529d9aa606148bf0ec7a462db5956c
-
SSDEEP
196608:PKXbeO7+kcGqENeEHRFmNC3MQ5bi3sXx3s2f7cCRazO4xyrMr3SXlhetL:M7OkgEHRcNKMQY3sXx82fwysxyor39
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-