General
-
Target
1294ad4220eae687295fc614845ac76e18b7f88ee807bef6158f38c32996476d
-
Size
1.8MB
-
Sample
240625-km3sgazapg
-
MD5
1b2827b8e199c4333a510dfb388981bd
-
SHA1
1f47cda2561503fd6a15d642360f08c7f69512f5
-
SHA256
1294ad4220eae687295fc614845ac76e18b7f88ee807bef6158f38c32996476d
-
SHA512
cbfc71461c008d572d1cde2d7b56d5016c9c56277a529a5438e6d9c203ddbb5921557cf9afe8092300e40153ef8ccf3f5374be436d6256594ed0321648258ac3
-
SSDEEP
24576:SQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVE/aJN0fun2S:SQZAdVyVT9n/Gg0P+WhoeJN0mn2S
Static task
static1
Behavioral task
behavioral1
Sample
1294ad4220eae687295fc614845ac76e18b7f88ee807bef6158f38c32996476d.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
1294ad4220eae687295fc614845ac76e18b7f88ee807bef6158f38c32996476d
-
Size
1.8MB
-
MD5
1b2827b8e199c4333a510dfb388981bd
-
SHA1
1f47cda2561503fd6a15d642360f08c7f69512f5
-
SHA256
1294ad4220eae687295fc614845ac76e18b7f88ee807bef6158f38c32996476d
-
SHA512
cbfc71461c008d572d1cde2d7b56d5016c9c56277a529a5438e6d9c203ddbb5921557cf9afe8092300e40153ef8ccf3f5374be436d6256594ed0321648258ac3
-
SSDEEP
24576:SQZoidOTdVZinacCET9Ecl1erdg0MCiVWhFU7cVE/aJN0fun2S:SQZAdVyVT9n/Gg0P+WhoeJN0mn2S
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-