General
-
Target
adaa6a94bf84f114aaba55315ca117bd66acfd0b3b71cb3dee61776c1234acf8
-
Size
1.4MB
-
Sample
240624-r5hcta1cmp
-
MD5
ffd1159c58ff053da408cc25e22db4f9
-
SHA1
eda52aa5138284b69504078107054cee2ce4e9cf
-
SHA256
adaa6a94bf84f114aaba55315ca117bd66acfd0b3b71cb3dee61776c1234acf8
-
SHA512
f8007e2bd1c34910c226e7b345a5277d84fe04ae77e1674a4ab7ed0cb7aade672aa55177f5c231f306b38a83af35afa6a8ffaab0b23f23eb574852d7669f85eb
-
SSDEEP
24576:F39WaOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:598HPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
adaa6a94bf84f114aaba55315ca117bd66acfd0b3b71cb3dee61776c1234acf8.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
adaa6a94bf84f114aaba55315ca117bd66acfd0b3b71cb3dee61776c1234acf8
-
Size
1.4MB
-
MD5
ffd1159c58ff053da408cc25e22db4f9
-
SHA1
eda52aa5138284b69504078107054cee2ce4e9cf
-
SHA256
adaa6a94bf84f114aaba55315ca117bd66acfd0b3b71cb3dee61776c1234acf8
-
SHA512
f8007e2bd1c34910c226e7b345a5277d84fe04ae77e1674a4ab7ed0cb7aade672aa55177f5c231f306b38a83af35afa6a8ffaab0b23f23eb574852d7669f85eb
-
SSDEEP
24576:F39WaOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:598HPkVOBTK
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-