General
-
Target
44596be665dcc956952473db831eb74542481a8d482b8629b2779fa8cf9624ec
-
Size
2.6MB
-
Sample
240603-rx9gbshf5w
-
MD5
643d408d3cc21a2805266878c498c3f6
-
SHA1
99e0be7ea25d962604ed9964583ac28b6eb5a17a
-
SHA256
44596be665dcc956952473db831eb74542481a8d482b8629b2779fa8cf9624ec
-
SHA512
5a5e9769950480a24b68d194d9bfcf65a56b016b105b9166654eecdfb573d098fdd0c4fb969f15d6995184ec593939d2076317c4d0c2496fa64d1a48971ad594
-
SSDEEP
49152:tCwsbCANnKXferL7Vwe/Gg0P+Wh4JWJJsxLDmn23:Qws2ANnKXOaeOgmh4JWJJsxLDmn23
Static task
static1
Behavioral task
behavioral1
Sample
44596be665dcc956952473db831eb74542481a8d482b8629b2779fa8cf9624ec.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
44596be665dcc956952473db831eb74542481a8d482b8629b2779fa8cf9624ec
-
Size
2.6MB
-
MD5
643d408d3cc21a2805266878c498c3f6
-
SHA1
99e0be7ea25d962604ed9964583ac28b6eb5a17a
-
SHA256
44596be665dcc956952473db831eb74542481a8d482b8629b2779fa8cf9624ec
-
SHA512
5a5e9769950480a24b68d194d9bfcf65a56b016b105b9166654eecdfb573d098fdd0c4fb969f15d6995184ec593939d2076317c4d0c2496fa64d1a48971ad594
-
SSDEEP
49152:tCwsbCANnKXferL7Vwe/Gg0P+Wh4JWJJsxLDmn23:Qws2ANnKXOaeOgmh4JWJJsxLDmn23
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-