General
-
Target
dec259603966059be145ef26af8bc225608112939043e7893a4d5de61ba8398a
-
Size
11.2MB
-
Sample
240624-eb17lswfra
-
MD5
22540f19015764a2fc2beea2f167c9ab
-
SHA1
a4a7f39c67b7e858ba36cb56ff1901b3359533a1
-
SHA256
dec259603966059be145ef26af8bc225608112939043e7893a4d5de61ba8398a
-
SHA512
912ceca3b87d262a8ae44a7d83e22c5810138b461f7fec2122bef1a0d48d8c1248024386cbac15a723453c9a0b3d13569e9901b0e14a4547e70c7ea484c354a0
-
SSDEEP
98304:Jws2ANnKXOaeOgmhX1UEvZsPdDM+vJ0OME34LzYLcd7m9uALfprsQ6EooKidt5J7:7KXbeO75mEyYlEI3CcdsuAdGEHd3JVHt
Static task
static1
Behavioral task
behavioral1
Sample
dec259603966059be145ef26af8bc225608112939043e7893a4d5de61ba8398a.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
dec259603966059be145ef26af8bc225608112939043e7893a4d5de61ba8398a
-
Size
11.2MB
-
MD5
22540f19015764a2fc2beea2f167c9ab
-
SHA1
a4a7f39c67b7e858ba36cb56ff1901b3359533a1
-
SHA256
dec259603966059be145ef26af8bc225608112939043e7893a4d5de61ba8398a
-
SHA512
912ceca3b87d262a8ae44a7d83e22c5810138b461f7fec2122bef1a0d48d8c1248024386cbac15a723453c9a0b3d13569e9901b0e14a4547e70c7ea484c354a0
-
SSDEEP
98304:Jws2ANnKXOaeOgmhX1UEvZsPdDM+vJ0OME34LzYLcd7m9uALfprsQ6EooKidt5J7:7KXbeO75mEyYlEI3CcdsuAdGEHd3JVHt
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-