General
-
Target
966923fca125d611aee84f63dabccae716243182ec3b7c9ced7fb79fa0a86cc5
-
Size
3.7MB
-
Sample
240624-el4qgswhrb
-
MD5
fa6cf03d7d1883e7d1c7e57f0aa31a54
-
SHA1
dfdef5007f29d5cf659fa5c782fff17bdb8a46d2
-
SHA256
966923fca125d611aee84f63dabccae716243182ec3b7c9ced7fb79fa0a86cc5
-
SHA512
87e0841639657d0ba10d11901f52bf950e8239d6de3547a740ad21adf132b9aa69ef1a7332a399a79b6c803e790eba432d8c8b0ebfd82085bbfd05bf19c7bcff
-
SSDEEP
49152:YCwsbCANnKXferL7Vwe/Gg0P+Whl6SSRrNRmH58Hjb5QzzskUMnc:zws2ANnKXOaeOgmhASR5Kn5QzJ
Static task
static1
Behavioral task
behavioral1
Sample
966923fca125d611aee84f63dabccae716243182ec3b7c9ced7fb79fa0a86cc5.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
966923fca125d611aee84f63dabccae716243182ec3b7c9ced7fb79fa0a86cc5
-
Size
3.7MB
-
MD5
fa6cf03d7d1883e7d1c7e57f0aa31a54
-
SHA1
dfdef5007f29d5cf659fa5c782fff17bdb8a46d2
-
SHA256
966923fca125d611aee84f63dabccae716243182ec3b7c9ced7fb79fa0a86cc5
-
SHA512
87e0841639657d0ba10d11901f52bf950e8239d6de3547a740ad21adf132b9aa69ef1a7332a399a79b6c803e790eba432d8c8b0ebfd82085bbfd05bf19c7bcff
-
SSDEEP
49152:YCwsbCANnKXferL7Vwe/Gg0P+Whl6SSRrNRmH58Hjb5QzzskUMnc:zws2ANnKXOaeOgmhASR5Kn5QzJ
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-