General
-
Target
3305595557ca489cd7f0112bff4282aab14ecbdadab667b3afbef8e14e396cf9
-
Size
1.5MB
-
Sample
240526-m2xk4sfg9y
-
MD5
c3be351e23b845b67686c64bd3ac48d9
-
SHA1
c76caae04ee9b35158411e4513f409694fb6cfe4
-
SHA256
3305595557ca489cd7f0112bff4282aab14ecbdadab667b3afbef8e14e396cf9
-
SHA512
0b1cb40f23a97401f67954501dfff82967b7933219091d11eed0fe78a4b47444165a4c5ec23dd8777e8ca3cb595ba48be83997d7139aa871f7a2e922c1cc6409
-
SSDEEP
24576:NQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVLaM4Y+WN5mmT7KR:NQZAdVyVT9n/Gg0P+WhokZvfKR
Static task
static1
Behavioral task
behavioral1
Sample
3305595557ca489cd7f0112bff4282aab14ecbdadab667b3afbef8e14e396cf9.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
3305595557ca489cd7f0112bff4282aab14ecbdadab667b3afbef8e14e396cf9
-
Size
1.5MB
-
MD5
c3be351e23b845b67686c64bd3ac48d9
-
SHA1
c76caae04ee9b35158411e4513f409694fb6cfe4
-
SHA256
3305595557ca489cd7f0112bff4282aab14ecbdadab667b3afbef8e14e396cf9
-
SHA512
0b1cb40f23a97401f67954501dfff82967b7933219091d11eed0fe78a4b47444165a4c5ec23dd8777e8ca3cb595ba48be83997d7139aa871f7a2e922c1cc6409
-
SSDEEP
24576:NQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVLaM4Y+WN5mmT7KR:NQZAdVyVT9n/Gg0P+WhokZvfKR
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-