General
-
Target
92aad90a6167c0c5a11416c439c2d3e0545345873d51b5730527d9d0d9ef1646
-
Size
11.3MB
-
Sample
240625-ggh94atblh
-
MD5
c5691b1d397b9a57fff6529fcce38e4d
-
SHA1
dcb2cf055b70652d321da11e87d3b7b9e3511529
-
SHA256
92aad90a6167c0c5a11416c439c2d3e0545345873d51b5730527d9d0d9ef1646
-
SHA512
e0830ee30ca35b14fdeb40a5d026d982d16343739a2f3e1ac58091b4c5d939346dd18a804b9bf6ddfbb1fc76e6b5e7f5c224a9468615c0620cfaabda4e5de762
-
SSDEEP
24576:iOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN+Fyzhyzi:rHPkVOBTKn
Static task
static1
Behavioral task
behavioral1
Sample
92aad90a6167c0c5a11416c439c2d3e0545345873d51b5730527d9d0d9ef1646.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
92aad90a6167c0c5a11416c439c2d3e0545345873d51b5730527d9d0d9ef1646
-
Size
11.3MB
-
MD5
c5691b1d397b9a57fff6529fcce38e4d
-
SHA1
dcb2cf055b70652d321da11e87d3b7b9e3511529
-
SHA256
92aad90a6167c0c5a11416c439c2d3e0545345873d51b5730527d9d0d9ef1646
-
SHA512
e0830ee30ca35b14fdeb40a5d026d982d16343739a2f3e1ac58091b4c5d939346dd18a804b9bf6ddfbb1fc76e6b5e7f5c224a9468615c0620cfaabda4e5de762
-
SSDEEP
24576:iOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN+Fyzhyzi:rHPkVOBTKn
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-