General
-
Target
cc88f6dafe41b5d9b41b3acf89296b234f88fd814047d2d51225fcac9f6314f9
-
Size
14.1MB
-
Sample
240528-ysqlzsbd27
-
MD5
2f07c1ac896187b39fad1abbef183966
-
SHA1
8448c82b78de9e5dc3acbf8dec7bbda316c1ae8b
-
SHA256
cc88f6dafe41b5d9b41b3acf89296b234f88fd814047d2d51225fcac9f6314f9
-
SHA512
61379278f3d11955941385f2fe07826ce8ad2a5def3de18f70d81c43f2ab229b3a71c3c8894bfb833b77ed87c524c0e0afd740c390175d67c9c3f8fc0fe56fa8
-
SSDEEP
196608:7KXbeO73QMu3eBPOA09s+Xx37KvXde7o5Gh+h3earoHd+HLiAUF+Cd6:Q7F0eCVxm/deD+tjLiAUNY
Behavioral task
behavioral1
Sample
cc88f6dafe41b5d9b41b3acf89296b234f88fd814047d2d51225fcac9f6314f9.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
cc88f6dafe41b5d9b41b3acf89296b234f88fd814047d2d51225fcac9f6314f9
-
Size
14.1MB
-
MD5
2f07c1ac896187b39fad1abbef183966
-
SHA1
8448c82b78de9e5dc3acbf8dec7bbda316c1ae8b
-
SHA256
cc88f6dafe41b5d9b41b3acf89296b234f88fd814047d2d51225fcac9f6314f9
-
SHA512
61379278f3d11955941385f2fe07826ce8ad2a5def3de18f70d81c43f2ab229b3a71c3c8894bfb833b77ed87c524c0e0afd740c390175d67c9c3f8fc0fe56fa8
-
SSDEEP
196608:7KXbeO73QMu3eBPOA09s+Xx37KvXde7o5Gh+h3earoHd+HLiAUF+Cd6:Q7F0eCVxm/deD+tjLiAUNY
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-