General
-
Target
ce26c7a5cf33fddfa129bb60ddbbfdb3eed63cd06335ad724ef4ca343e6b6f28
-
Size
3.0MB
-
Sample
240529-hpa45aea8z
-
MD5
681d03df78900338883015e3682b15cb
-
SHA1
abbee1fb308fbe83c0421aa607fb635638564102
-
SHA256
ce26c7a5cf33fddfa129bb60ddbbfdb3eed63cd06335ad724ef4ca343e6b6f28
-
SHA512
332667cb1895f89ddc18596f8ecdb01a4417987c9db4cf0f0428d5cdd3f8a7403170b874c0935f54a9015135fb486a415f2519f4829fb9fd42348296134b44ea
-
SSDEEP
49152:H09XJt4HIN2H2tFvduyShPO/8lwKvR+u/VPO/lP:UZJt4HINy2LkhPO/8lH5+KPO/lP
Static task
static1
Behavioral task
behavioral1
Sample
ce26c7a5cf33fddfa129bb60ddbbfdb3eed63cd06335ad724ef4ca343e6b6f28.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
ce26c7a5cf33fddfa129bb60ddbbfdb3eed63cd06335ad724ef4ca343e6b6f28
-
Size
3.0MB
-
MD5
681d03df78900338883015e3682b15cb
-
SHA1
abbee1fb308fbe83c0421aa607fb635638564102
-
SHA256
ce26c7a5cf33fddfa129bb60ddbbfdb3eed63cd06335ad724ef4ca343e6b6f28
-
SHA512
332667cb1895f89ddc18596f8ecdb01a4417987c9db4cf0f0428d5cdd3f8a7403170b874c0935f54a9015135fb486a415f2519f4829fb9fd42348296134b44ea
-
SSDEEP
49152:H09XJt4HIN2H2tFvduyShPO/8lwKvR+u/VPO/lP:UZJt4HINy2LkhPO/8lH5+KPO/lP
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-