General
-
Target
7158aef5f34d6f138676dea0520bcbac6aecd357bedd19d47eb65366cc4ff971
-
Size
4.6MB
-
Sample
240529-gwtdlsch3x
-
MD5
ff70dcf35558edf2d777a382f9d54918
-
SHA1
8e9a4574f2483b2703a10ad25c4f8fdfdbc49602
-
SHA256
7158aef5f34d6f138676dea0520bcbac6aecd357bedd19d47eb65366cc4ff971
-
SHA512
849f00a30bc8bd0bd9f3278b5b50ef2fa6cc33343f134b64e73bb85f56fa61744c3520f43b2bdc49eecfa383a4dd6d0ec3706cc34054debab8e227bfecd023c5
-
SSDEEP
98304:LGdVyVT9nOgmhPmn2xrYUyjdcmZtrZsUko1qGAmL2lPiVkD5rJNkT1OZ7Nb7v9t0:4WT9nO7BmnUWdz9xB3s5TkKJX9tiyq
Static task
static1
Behavioral task
behavioral1
Sample
7158aef5f34d6f138676dea0520bcbac6aecd357bedd19d47eb65366cc4ff971.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
7158aef5f34d6f138676dea0520bcbac6aecd357bedd19d47eb65366cc4ff971
-
Size
4.6MB
-
MD5
ff70dcf35558edf2d777a382f9d54918
-
SHA1
8e9a4574f2483b2703a10ad25c4f8fdfdbc49602
-
SHA256
7158aef5f34d6f138676dea0520bcbac6aecd357bedd19d47eb65366cc4ff971
-
SHA512
849f00a30bc8bd0bd9f3278b5b50ef2fa6cc33343f134b64e73bb85f56fa61744c3520f43b2bdc49eecfa383a4dd6d0ec3706cc34054debab8e227bfecd023c5
-
SSDEEP
98304:LGdVyVT9nOgmhPmn2xrYUyjdcmZtrZsUko1qGAmL2lPiVkD5rJNkT1OZ7Nb7v9t0:4WT9nO7BmnUWdz9xB3s5TkKJX9tiyq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-