General
-
Target
47e414853b35bed6671c21fc3db084aaa4075c056965dc186fbc9e08e5bf5e9d
-
Size
4.7MB
-
Sample
240604-keq4psbd58
-
MD5
5f5ea3bb0fbbb939e44618d6f36a7497
-
SHA1
5a3e2382a6b99239140ea283155547bf5a82411b
-
SHA256
47e414853b35bed6671c21fc3db084aaa4075c056965dc186fbc9e08e5bf5e9d
-
SHA512
458a78687e4d213298f937476e00f5612c4bdd0e34fae458017e6f53fe2abb93a5420f187015e9c51d8a40416ed0baf0de395619f29e8f8e85db4772ea67ef18
-
SSDEEP
49152:bQZAdVyVT9n/Gg0P+WhoPyn28bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4Q:MGdVyVT9nOgmhiyn28bXsPN5kiQaZ56
Static task
static1
Behavioral task
behavioral1
Sample
47e414853b35bed6671c21fc3db084aaa4075c056965dc186fbc9e08e5bf5e9d.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
47e414853b35bed6671c21fc3db084aaa4075c056965dc186fbc9e08e5bf5e9d
-
Size
4.7MB
-
MD5
5f5ea3bb0fbbb939e44618d6f36a7497
-
SHA1
5a3e2382a6b99239140ea283155547bf5a82411b
-
SHA256
47e414853b35bed6671c21fc3db084aaa4075c056965dc186fbc9e08e5bf5e9d
-
SHA512
458a78687e4d213298f937476e00f5612c4bdd0e34fae458017e6f53fe2abb93a5420f187015e9c51d8a40416ed0baf0de395619f29e8f8e85db4772ea67ef18
-
SSDEEP
49152:bQZAdVyVT9n/Gg0P+WhoPyn28bXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4Q:MGdVyVT9nOgmhiyn28bXsPN5kiQaZ56
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-