General
-
Target
eec40300c3c262ddc2150a832b2506376068012456fe7ce2ddf3fd9f08e86283
-
Size
3.8MB
-
Sample
240624-eb7z6azdrj
-
MD5
fcd4e8be6217ef4554d1a49011077ec3
-
SHA1
363807eb0f6228558258c4108859d68b8903733f
-
SHA256
eec40300c3c262ddc2150a832b2506376068012456fe7ce2ddf3fd9f08e86283
-
SHA512
3f9255c948b334f92fae6c30294502427b9e2eb35ce1c5e32ccea90a43e8d5840216017a5bb23e44ceadd13a56cf231c31c54c275d2007aac7e6d248f8fa3470
-
SSDEEP
98304:OZJt4HINy2LkfNSMXyN6htR5jWUgFyI2OhkgA:EiINy2LkfNSQygbuP28VA
Static task
static1
Behavioral task
behavioral1
Sample
eec40300c3c262ddc2150a832b2506376068012456fe7ce2ddf3fd9f08e86283.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
eec40300c3c262ddc2150a832b2506376068012456fe7ce2ddf3fd9f08e86283
-
Size
3.8MB
-
MD5
fcd4e8be6217ef4554d1a49011077ec3
-
SHA1
363807eb0f6228558258c4108859d68b8903733f
-
SHA256
eec40300c3c262ddc2150a832b2506376068012456fe7ce2ddf3fd9f08e86283
-
SHA512
3f9255c948b334f92fae6c30294502427b9e2eb35ce1c5e32ccea90a43e8d5840216017a5bb23e44ceadd13a56cf231c31c54c275d2007aac7e6d248f8fa3470
-
SSDEEP
98304:OZJt4HINy2LkfNSMXyN6htR5jWUgFyI2OhkgA:EiINy2LkfNSQygbuP28VA
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-