General
-
Target
dff9e4d97bbf2ce27861be9055c2e9c8932d6ba6fdd00e3e69ab9f7db3829796
-
Size
3.6MB
-
Sample
240529-hp4rfafa28
-
MD5
52777195d7af3db72fac28ea05337c87
-
SHA1
e19b2b37a850ddd22e164c1cd7ff3bccabfa46e3
-
SHA256
dff9e4d97bbf2ce27861be9055c2e9c8932d6ba6fdd00e3e69ab9f7db3829796
-
SHA512
55f55b9fe498fc59d060254abdb3826cec6e42016a950a2f4750906caca77e35324dcc0b69a1a0f952dc0c38db0badd0fe4f3f9e5a3b6d2d782455e7cbcdac65
-
SSDEEP
49152:NCwsbCANnKXferL7Vwe/Gg0P+WhrP/7J3jrI+7TvuBoM:wws2ANnKXOaeOgmhLN3jEPBoM
Static task
static1
Behavioral task
behavioral1
Sample
dff9e4d97bbf2ce27861be9055c2e9c8932d6ba6fdd00e3e69ab9f7db3829796.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
dff9e4d97bbf2ce27861be9055c2e9c8932d6ba6fdd00e3e69ab9f7db3829796
-
Size
3.6MB
-
MD5
52777195d7af3db72fac28ea05337c87
-
SHA1
e19b2b37a850ddd22e164c1cd7ff3bccabfa46e3
-
SHA256
dff9e4d97bbf2ce27861be9055c2e9c8932d6ba6fdd00e3e69ab9f7db3829796
-
SHA512
55f55b9fe498fc59d060254abdb3826cec6e42016a950a2f4750906caca77e35324dcc0b69a1a0f952dc0c38db0badd0fe4f3f9e5a3b6d2d782455e7cbcdac65
-
SSDEEP
49152:NCwsbCANnKXferL7Vwe/Gg0P+WhrP/7J3jrI+7TvuBoM:wws2ANnKXOaeOgmhLN3jEPBoM
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-