General
-
Target
6487d399238929e022fad0758583761396fd93d6695ae5f15c640f8085064942
-
Size
2.0MB
-
Sample
240529-k7dn3sae56
-
MD5
d914533f787169f175c3f6823837ce7e
-
SHA1
76c47b2cef7410169442efd0d26f12aa0d76b551
-
SHA256
6487d399238929e022fad0758583761396fd93d6695ae5f15c640f8085064942
-
SHA512
7bfeb40e86977059e52e911091dc4b612d880e690351d0d7674dc66b14c5d2014984193048dbfc70862e1bde3ecc44680ad20d005429d4f161a0b7c397f845f2
-
SSDEEP
49152:TQZAdVyVT9n/Gg0P+Who5peicZPItx2apeapelI:UGdVyVT9nOgmhhittUvlI
Static task
static1
Behavioral task
behavioral1
Sample
6487d399238929e022fad0758583761396fd93d6695ae5f15c640f8085064942.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
6487d399238929e022fad0758583761396fd93d6695ae5f15c640f8085064942
-
Size
2.0MB
-
MD5
d914533f787169f175c3f6823837ce7e
-
SHA1
76c47b2cef7410169442efd0d26f12aa0d76b551
-
SHA256
6487d399238929e022fad0758583761396fd93d6695ae5f15c640f8085064942
-
SHA512
7bfeb40e86977059e52e911091dc4b612d880e690351d0d7674dc66b14c5d2014984193048dbfc70862e1bde3ecc44680ad20d005429d4f161a0b7c397f845f2
-
SSDEEP
49152:TQZAdVyVT9n/Gg0P+Who5peicZPItx2apeapelI:UGdVyVT9nOgmhhittUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-