General
-
Target
c857ec61782ebe5a9641d9c603cee5dacf6ad9690b09081f9acb2a06d019d845
-
Size
1.8MB
-
Sample
240529-l7lkcsba8x
-
MD5
dc5fb57bf44cc5fc39023dc3e411369d
-
SHA1
843f530056d0cf380dcf241dc9f00d70cfcead3a
-
SHA256
c857ec61782ebe5a9641d9c603cee5dacf6ad9690b09081f9acb2a06d019d845
-
SHA512
49807ade29e7e6ac8c2e3f271ce8e2f3e540b78da5286fcc00aea527f25ad741bb662923e6a70e5a79f74b72e9ae2d9ec3b0269b8cddc6b1fab0218c537b3ef0
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNEukEp3W8AD/Dhd+y4lqJ8QdCYDoDNK6:QHPkVOBTK/svD/DX+y4onCYDoD5
Static task
static1
Behavioral task
behavioral1
Sample
c857ec61782ebe5a9641d9c603cee5dacf6ad9690b09081f9acb2a06d019d845.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
c857ec61782ebe5a9641d9c603cee5dacf6ad9690b09081f9acb2a06d019d845
-
Size
1.8MB
-
MD5
dc5fb57bf44cc5fc39023dc3e411369d
-
SHA1
843f530056d0cf380dcf241dc9f00d70cfcead3a
-
SHA256
c857ec61782ebe5a9641d9c603cee5dacf6ad9690b09081f9acb2a06d019d845
-
SHA512
49807ade29e7e6ac8c2e3f271ce8e2f3e540b78da5286fcc00aea527f25ad741bb662923e6a70e5a79f74b72e9ae2d9ec3b0269b8cddc6b1fab0218c537b3ef0
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNEukEp3W8AD/Dhd+y4lqJ8QdCYDoDNK6:QHPkVOBTK/svD/DX+y4onCYDoD5
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-