General
-
Target
f9211dd0d2f7e03866f7dd357f0b1b363ffeb0a9a73a509fb8f953db32f8cde6
-
Size
1.2MB
-
Sample
240602-qr7vwaec98
-
MD5
90f7a819866dc5bf9b718b0dc5b3fbd8
-
SHA1
ade6107646939702927b8a8583375d4830c87524
-
SHA256
f9211dd0d2f7e03866f7dd357f0b1b363ffeb0a9a73a509fb8f953db32f8cde6
-
SHA512
186f35658dbed6ae1e9fb279538c8120c6459fbcf2d49ac9b3b08c9427057dc2f26c4436236c6a6b5c6d29ae3c43717c93fa26d6b8714637a3542ea72ea52566
-
SSDEEP
24576:JQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVlwpeN0:JQZAdVyVT9n/Gg0P+WhoPpeN0
Static task
static1
Behavioral task
behavioral1
Sample
f9211dd0d2f7e03866f7dd357f0b1b363ffeb0a9a73a509fb8f953db32f8cde6.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
f9211dd0d2f7e03866f7dd357f0b1b363ffeb0a9a73a509fb8f953db32f8cde6
-
Size
1.2MB
-
MD5
90f7a819866dc5bf9b718b0dc5b3fbd8
-
SHA1
ade6107646939702927b8a8583375d4830c87524
-
SHA256
f9211dd0d2f7e03866f7dd357f0b1b363ffeb0a9a73a509fb8f953db32f8cde6
-
SHA512
186f35658dbed6ae1e9fb279538c8120c6459fbcf2d49ac9b3b08c9427057dc2f26c4436236c6a6b5c6d29ae3c43717c93fa26d6b8714637a3542ea72ea52566
-
SSDEEP
24576:JQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVlwpeN0:JQZAdVyVT9n/Gg0P+WhoPpeN0
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-