General
-
Target
a90a617430ed9421424327419a2cb14dfdbf1e954575fb8f001cd568b3ad4b50
-
Size
2.1MB
-
Sample
240526-m3h44sfh3t
-
MD5
a7922ed44492a611fc557282791c0755
-
SHA1
d21b8c4d034c3c75781ebd2c29598363d7232367
-
SHA256
a90a617430ed9421424327419a2cb14dfdbf1e954575fb8f001cd568b3ad4b50
-
SHA512
5dc435a991cdbe9c5ebd6e4c922afcc2868ae9d256367a9adaa541de718cafd7069ded18909825293ec2d4ecee1a89cadeab977b233517810b69830a6cd14e14
-
SSDEEP
49152:FQZAdVyVT9n/Gg0P+WhoJpegLpDd0qZPItx2apeapelI:eGdVyVT9nOgmhVypDdotUvlI
Static task
static1
Behavioral task
behavioral1
Sample
a90a617430ed9421424327419a2cb14dfdbf1e954575fb8f001cd568b3ad4b50.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
a90a617430ed9421424327419a2cb14dfdbf1e954575fb8f001cd568b3ad4b50
-
Size
2.1MB
-
MD5
a7922ed44492a611fc557282791c0755
-
SHA1
d21b8c4d034c3c75781ebd2c29598363d7232367
-
SHA256
a90a617430ed9421424327419a2cb14dfdbf1e954575fb8f001cd568b3ad4b50
-
SHA512
5dc435a991cdbe9c5ebd6e4c922afcc2868ae9d256367a9adaa541de718cafd7069ded18909825293ec2d4ecee1a89cadeab977b233517810b69830a6cd14e14
-
SSDEEP
49152:FQZAdVyVT9n/Gg0P+WhoJpegLpDd0qZPItx2apeapelI:eGdVyVT9nOgmhVypDdotUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-