General
-
Target
a9da121b43ee83f92125c5551149a51456ef983893079454a2c89a51b1ed2d60
-
Size
374KB
-
Sample
240529-rjls4sha2t
-
MD5
666d1a0ee1dbcf143d24b31575f6ed6f
-
SHA1
8680adf3d5388f9f4738cfa62ce41b0fac23775a
-
SHA256
a9da121b43ee83f92125c5551149a51456ef983893079454a2c89a51b1ed2d60
-
SHA512
36bf43bd404c833ad8c0730ea053477c81372c5c89f1333c341445236ec00d7ff6125bc806cf9b2ae77e9fb85228002f4fa215ecbfebd21f350c4b2332aa9c5c
-
SSDEEP
6144:NjO+L1Czkq7KTW1Dl/saQ9rtYm3okqoBSpH50KcddsVRZdaiYviQJqOC5HpQwmB:ZMzpOTY+JzYmE7R55udm7U5JTrwe
Static task
static1
Behavioral task
behavioral1
Sample
a9da121b43ee83f92125c5551149a51456ef983893079454a2c89a51b1ed2d60.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
a9da121b43ee83f92125c5551149a51456ef983893079454a2c89a51b1ed2d60
-
Size
374KB
-
MD5
666d1a0ee1dbcf143d24b31575f6ed6f
-
SHA1
8680adf3d5388f9f4738cfa62ce41b0fac23775a
-
SHA256
a9da121b43ee83f92125c5551149a51456ef983893079454a2c89a51b1ed2d60
-
SHA512
36bf43bd404c833ad8c0730ea053477c81372c5c89f1333c341445236ec00d7ff6125bc806cf9b2ae77e9fb85228002f4fa215ecbfebd21f350c4b2332aa9c5c
-
SSDEEP
6144:NjO+L1Czkq7KTW1Dl/saQ9rtYm3okqoBSpH50KcddsVRZdaiYviQJqOC5HpQwmB:ZMzpOTY+JzYmE7R55udm7U5JTrwe
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-