General
-
Target
312d836a9f6dc81cc96ca2d75f1cc09fc15a1741b3ba7c85f6ae3a62edc39def
-
Size
2.5MB
-
Sample
240625-km4prssfkm
-
MD5
22a627d2b5a1494685c682f3c8e19fd5
-
SHA1
6cf47886e3af836eed1c373ff40b582b1b1b8531
-
SHA256
312d836a9f6dc81cc96ca2d75f1cc09fc15a1741b3ba7c85f6ae3a62edc39def
-
SHA512
2b65e1d59358865df1ff5b4799aef892b72e1121a85838071121d5debae74211dbce2550e1314df6952f5ac3d770db8297737ebe8831358e27fed4232433a871
-
SSDEEP
49152:vQZAdVyVT9n/Gg0P+WhocKy5JDmn2OOacy8y/E7nhRySTAuYiKy:IGdVyVT9nOgmhsOJDmn2O+HJ7eS2
Static task
static1
Behavioral task
behavioral1
Sample
312d836a9f6dc81cc96ca2d75f1cc09fc15a1741b3ba7c85f6ae3a62edc39def.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
312d836a9f6dc81cc96ca2d75f1cc09fc15a1741b3ba7c85f6ae3a62edc39def
-
Size
2.5MB
-
MD5
22a627d2b5a1494685c682f3c8e19fd5
-
SHA1
6cf47886e3af836eed1c373ff40b582b1b1b8531
-
SHA256
312d836a9f6dc81cc96ca2d75f1cc09fc15a1741b3ba7c85f6ae3a62edc39def
-
SHA512
2b65e1d59358865df1ff5b4799aef892b72e1121a85838071121d5debae74211dbce2550e1314df6952f5ac3d770db8297737ebe8831358e27fed4232433a871
-
SSDEEP
49152:vQZAdVyVT9n/Gg0P+WhocKy5JDmn2OOacy8y/E7nhRySTAuYiKy:IGdVyVT9nOgmhsOJDmn2O+HJ7eS2
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-