General
-
Target
e849b00c3fe851146b61bf85c90ddafc02f16f745181ebd5cd584d33568e77ac
-
Size
3.5MB
-
Sample
240605-d2w5xadg37
-
MD5
5c0c8678e3275635d77db54d4460fb72
-
SHA1
1c04ba1e3256a204293c0965d6a44a4c8641aaef
-
SHA256
e849b00c3fe851146b61bf85c90ddafc02f16f745181ebd5cd584d33568e77ac
-
SHA512
0e94d175f97643a32c3d01f87039f75df2083cf5975dfbe9c8adf47fbab25b52f430937931c604562a73bf75a21b032bfad624683718202251a7b075a8c5ee1c
-
SSDEEP
49152:ZCwsbCANnKXferL7Vwe/Gg0P+WhwJDmn2Y0YZZuOZ:Uws2ANnKXOaeOgmhwJDmn2Y0YZZuo
Static task
static1
Behavioral task
behavioral1
Sample
e849b00c3fe851146b61bf85c90ddafc02f16f745181ebd5cd584d33568e77ac.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
e849b00c3fe851146b61bf85c90ddafc02f16f745181ebd5cd584d33568e77ac
-
Size
3.5MB
-
MD5
5c0c8678e3275635d77db54d4460fb72
-
SHA1
1c04ba1e3256a204293c0965d6a44a4c8641aaef
-
SHA256
e849b00c3fe851146b61bf85c90ddafc02f16f745181ebd5cd584d33568e77ac
-
SHA512
0e94d175f97643a32c3d01f87039f75df2083cf5975dfbe9c8adf47fbab25b52f430937931c604562a73bf75a21b032bfad624683718202251a7b075a8c5ee1c
-
SSDEEP
49152:ZCwsbCANnKXferL7Vwe/Gg0P+WhwJDmn2Y0YZZuOZ:Uws2ANnKXOaeOgmhwJDmn2Y0YZZuo
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets DLL path for service in the registry
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-