General
-
Target
91c04f37d24780b6037e88d4e9054624be21986e6db45c962d71ab9895894cbb
-
Size
1.3MB
-
Sample
240604-kd5wgaah2t
-
MD5
ba7504453bf5f4e9bc55d2043bfe6222
-
SHA1
83adc317bebbe52443a9b51400fc5939cd2d49c9
-
SHA256
91c04f37d24780b6037e88d4e9054624be21986e6db45c962d71ab9895894cbb
-
SHA512
b2e9fbcc41b2231e82ca2d3dcc790f9ce3ed47b2b13d5e580895cb8b25d50ddeb434af752b53167cf40fc622d2a6cf22d658ef5067f4c8aeb69426b9e4045900
-
SSDEEP
24576:zQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVVwpe0EARyn29:zQZAdVyVT9n/Gg0P+WhovpeSyn29
Static task
static1
Behavioral task
behavioral1
Sample
91c04f37d24780b6037e88d4e9054624be21986e6db45c962d71ab9895894cbb.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
91c04f37d24780b6037e88d4e9054624be21986e6db45c962d71ab9895894cbb
-
Size
1.3MB
-
MD5
ba7504453bf5f4e9bc55d2043bfe6222
-
SHA1
83adc317bebbe52443a9b51400fc5939cd2d49c9
-
SHA256
91c04f37d24780b6037e88d4e9054624be21986e6db45c962d71ab9895894cbb
-
SHA512
b2e9fbcc41b2231e82ca2d3dcc790f9ce3ed47b2b13d5e580895cb8b25d50ddeb434af752b53167cf40fc622d2a6cf22d658ef5067f4c8aeb69426b9e4045900
-
SSDEEP
24576:zQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVVwpe0EARyn29:zQZAdVyVT9n/Gg0P+WhovpeSyn29
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-