General
-
Target
c880632c6d04e2e720f5ade3eff68a8244a2cc4fdc058931f9f1c95d6c6eda76
-
Size
11.6MB
-
Sample
240526-naweeaha72
-
MD5
8ff38f6aaa1a2a3433cf4498b5624eb2
-
SHA1
bdca178f8c4cacfb14b36b30cbfde563e63f0517
-
SHA256
c880632c6d04e2e720f5ade3eff68a8244a2cc4fdc058931f9f1c95d6c6eda76
-
SHA512
765dcee5916b12a252fdb2690caa386292ae752e9c62af8ecc579b5d8cefb273b99f55a68a31fd6ce7c60522bb7f0ed89dffb00740a006be5738cb930919cbdb
-
SSDEEP
196608:RWT9nO7sol7S7J64Xcv3REzJDhe+Mebk43qmtIwdC/iGtdQwGZnlae1wpBnjDqfD:j7sol7S1vsv3Re1c+rIm2wdZ0deC7a4X
Static task
static1
Behavioral task
behavioral1
Sample
c880632c6d04e2e720f5ade3eff68a8244a2cc4fdc058931f9f1c95d6c6eda76.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
c880632c6d04e2e720f5ade3eff68a8244a2cc4fdc058931f9f1c95d6c6eda76
-
Size
11.6MB
-
MD5
8ff38f6aaa1a2a3433cf4498b5624eb2
-
SHA1
bdca178f8c4cacfb14b36b30cbfde563e63f0517
-
SHA256
c880632c6d04e2e720f5ade3eff68a8244a2cc4fdc058931f9f1c95d6c6eda76
-
SHA512
765dcee5916b12a252fdb2690caa386292ae752e9c62af8ecc579b5d8cefb273b99f55a68a31fd6ce7c60522bb7f0ed89dffb00740a006be5738cb930919cbdb
-
SSDEEP
196608:RWT9nO7sol7S7J64Xcv3REzJDhe+Mebk43qmtIwdC/iGtdQwGZnlae1wpBnjDqfD:j7sol7S1vsv3Re1c+rIm2wdZ0deC7a4X
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-