General
-
Target
22a88ea39a673084a825ab808ad3c7132eb79271addb829a40a794e5fc4e3007
-
Size
2.3MB
-
Sample
240625-v5b3kstbne
-
MD5
7ff971bfd4792c87e3931cfa051435b8
-
SHA1
2ad88be4abe591c3a32d7cf9a9caf72b2a9caf5b
-
SHA256
22a88ea39a673084a825ab808ad3c7132eb79271addb829a40a794e5fc4e3007
-
SHA512
18985165f620ce71f632ac26042b8d108b274431f6889a938a499e1a8395354560eda6407767de7bed9828be50a00838496497c4a9be26d822b0358e785eb0dd
-
SSDEEP
24576:mCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:mCwsbCANnKXferL7Vwe/Gg0P+WhH
Static task
static1
Behavioral task
behavioral1
Sample
22a88ea39a673084a825ab808ad3c7132eb79271addb829a40a794e5fc4e3007.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
22a88ea39a673084a825ab808ad3c7132eb79271addb829a40a794e5fc4e3007
-
Size
2.3MB
-
MD5
7ff971bfd4792c87e3931cfa051435b8
-
SHA1
2ad88be4abe591c3a32d7cf9a9caf72b2a9caf5b
-
SHA256
22a88ea39a673084a825ab808ad3c7132eb79271addb829a40a794e5fc4e3007
-
SHA512
18985165f620ce71f632ac26042b8d108b274431f6889a938a499e1a8395354560eda6407767de7bed9828be50a00838496497c4a9be26d822b0358e785eb0dd
-
SSDEEP
24576:mCwsbKgbQ5NANIvGTYwMHXA+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nHs:mCwsbCANnKXferL7Vwe/Gg0P+WhH
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-