General
-
Target
8b412c41f6cd8425c90e4eebfc3e22f802b71698845deddfb7cbae2500be239d
-
Size
4.8MB
-
Sample
240529-h3xkaafe59
-
MD5
f40eb1b6e9ba530187ebbab7f55afe3f
-
SHA1
a4490c86a597a36045599551f48b8fa017d51874
-
SHA256
8b412c41f6cd8425c90e4eebfc3e22f802b71698845deddfb7cbae2500be239d
-
SHA512
f001b32bb605e7b805c1b9feb4547b059ef5958c9d77555604883003869e6ee0246e170562a908549451f4c86e3203b8ec74ac418ba5d3341caaf551d9702f25
-
SSDEEP
49152:DQZAdVyVT9n/Gg0P+WhoFmn25bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4Q:kGdVyVT9nOgmhimn25bXsPN5kiQaZ56
Static task
static1
Behavioral task
behavioral1
Sample
8b412c41f6cd8425c90e4eebfc3e22f802b71698845deddfb7cbae2500be239d.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
8b412c41f6cd8425c90e4eebfc3e22f802b71698845deddfb7cbae2500be239d
-
Size
4.8MB
-
MD5
f40eb1b6e9ba530187ebbab7f55afe3f
-
SHA1
a4490c86a597a36045599551f48b8fa017d51874
-
SHA256
8b412c41f6cd8425c90e4eebfc3e22f802b71698845deddfb7cbae2500be239d
-
SHA512
f001b32bb605e7b805c1b9feb4547b059ef5958c9d77555604883003869e6ee0246e170562a908549451f4c86e3203b8ec74ac418ba5d3341caaf551d9702f25
-
SSDEEP
49152:DQZAdVyVT9n/Gg0P+WhoFmn25bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4Q:kGdVyVT9nOgmhimn25bXsPN5kiQaZ56
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-