General
-
Target
2fcd373ca643d84ddf08d9ce16687fc36f8615316f138f8a92725b2cc9a835a8
-
Size
1.3MB
-
Sample
240529-rhcttahf98
-
MD5
e6fc0c323c92002bc010b35543409a62
-
SHA1
2871e5dba037e0d713786404607776fc0556c492
-
SHA256
2fcd373ca643d84ddf08d9ce16687fc36f8615316f138f8a92725b2cc9a835a8
-
SHA512
375105e119f3d7168b8bc8e047005a76e417689192778b42da6aae7c81aa62b3136a6ecd0ce706b7b7c3953224a94c23d5af79108645608e4b185dd5c35cbb48
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNk:QHPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
2fcd373ca643d84ddf08d9ce16687fc36f8615316f138f8a92725b2cc9a835a8.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
2fcd373ca643d84ddf08d9ce16687fc36f8615316f138f8a92725b2cc9a835a8
-
Size
1.3MB
-
MD5
e6fc0c323c92002bc010b35543409a62
-
SHA1
2871e5dba037e0d713786404607776fc0556c492
-
SHA256
2fcd373ca643d84ddf08d9ce16687fc36f8615316f138f8a92725b2cc9a835a8
-
SHA512
375105e119f3d7168b8bc8e047005a76e417689192778b42da6aae7c81aa62b3136a6ecd0ce706b7b7c3953224a94c23d5af79108645608e4b185dd5c35cbb48
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNk:QHPkVOBTK
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-