General
-
Target
3c282d0abde49d33d9ea74640276cf14dbf2cd2b96ce4c30b2d7ffe466a28074
-
Size
1.2MB
-
Sample
240529-l7ndysba9t
-
MD5
ea22b8ac952e10f0c118b73bdf528a2d
-
SHA1
4c97eedfe479a6bb5ff790087beb7bde96ed07c6
-
SHA256
3c282d0abde49d33d9ea74640276cf14dbf2cd2b96ce4c30b2d7ffe466a28074
-
SHA512
1c2f328c52a67622aea0bb3b83a4a915f3ddcfde23c7a8838e783ecc3a99a939d8e08ba9e4fab1881f26e7a699241fe17de0d607a8615f7c80ec4cc7e4e51295
-
SSDEEP
24576:709tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+ewpe8V:709XJt4HIN2H2tFvduySbpe8V
Static task
static1
Behavioral task
behavioral1
Sample
3c282d0abde49d33d9ea74640276cf14dbf2cd2b96ce4c30b2d7ffe466a28074.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
3c282d0abde49d33d9ea74640276cf14dbf2cd2b96ce4c30b2d7ffe466a28074
-
Size
1.2MB
-
MD5
ea22b8ac952e10f0c118b73bdf528a2d
-
SHA1
4c97eedfe479a6bb5ff790087beb7bde96ed07c6
-
SHA256
3c282d0abde49d33d9ea74640276cf14dbf2cd2b96ce4c30b2d7ffe466a28074
-
SHA512
1c2f328c52a67622aea0bb3b83a4a915f3ddcfde23c7a8838e783ecc3a99a939d8e08ba9e4fab1881f26e7a699241fe17de0d607a8615f7c80ec4cc7e4e51295
-
SSDEEP
24576:709tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+ewpe8V:709XJt4HIN2H2tFvduySbpe8V
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-