General
-
Target
0b559b5a6a673f168766212ebb472295d1c0b1bf0ffab5efc19d431cd76fcbed
-
Size
2.3MB
-
Sample
240529-hl1wdaeg75
-
MD5
553363234bb01e734d654fec0759ec13
-
SHA1
4267b498e012d3f3c89abf5f812f522488e37350
-
SHA256
0b559b5a6a673f168766212ebb472295d1c0b1bf0ffab5efc19d431cd76fcbed
-
SHA512
0806684e5818ff7ca519169b813950379d43bf057bb59ea8b091f662d5b6ec083ac45de9b83ee5a60291111da952005a346847344329e834adc89aa141444c21
-
SSDEEP
24576:SCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH1:SCwsbCANnKXferL7Vwe/Gg0P+WhKh7
Static task
static1
Behavioral task
behavioral1
Sample
0b559b5a6a673f168766212ebb472295d1c0b1bf0ffab5efc19d431cd76fcbed.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
0b559b5a6a673f168766212ebb472295d1c0b1bf0ffab5efc19d431cd76fcbed
-
Size
2.3MB
-
MD5
553363234bb01e734d654fec0759ec13
-
SHA1
4267b498e012d3f3c89abf5f812f522488e37350
-
SHA256
0b559b5a6a673f168766212ebb472295d1c0b1bf0ffab5efc19d431cd76fcbed
-
SHA512
0806684e5818ff7ca519169b813950379d43bf057bb59ea8b091f662d5b6ec083ac45de9b83ee5a60291111da952005a346847344329e834adc89aa141444c21
-
SSDEEP
24576:SCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH1:SCwsbCANnKXferL7Vwe/Gg0P+WhKh7
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-