General
-
Target
b1e7df1718182e5f1783ed96e944a7e22c0b46826a4db3b648e0ee8e49a45230
-
Size
1.6MB
-
Sample
240624-eagftawfmf
-
MD5
7e63f5045371ce27d1ea76e8c9fb2ee5
-
SHA1
ecd38d921e100aa2fc685c790f783a2a1748c121
-
SHA256
b1e7df1718182e5f1783ed96e944a7e22c0b46826a4db3b648e0ee8e49a45230
-
SHA512
02c5f1423448767be7b05c2ee74a821b278b78cfdbb3961109a8f95766dbeed1a7735624bf1ed221501efa23bfb046378c5f4127da7c9a4cfd6f5d0a91c9b24e
-
SSDEEP
24576:N09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+aB:N09XJt4HIN2H2tFvduySG
Static task
static1
Behavioral task
behavioral1
Sample
b1e7df1718182e5f1783ed96e944a7e22c0b46826a4db3b648e0ee8e49a45230.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
b1e7df1718182e5f1783ed96e944a7e22c0b46826a4db3b648e0ee8e49a45230
-
Size
1.6MB
-
MD5
7e63f5045371ce27d1ea76e8c9fb2ee5
-
SHA1
ecd38d921e100aa2fc685c790f783a2a1748c121
-
SHA256
b1e7df1718182e5f1783ed96e944a7e22c0b46826a4db3b648e0ee8e49a45230
-
SHA512
02c5f1423448767be7b05c2ee74a821b278b78cfdbb3961109a8f95766dbeed1a7735624bf1ed221501efa23bfb046378c5f4127da7c9a4cfd6f5d0a91c9b24e
-
SSDEEP
24576:N09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+aB:N09XJt4HIN2H2tFvduySG
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-