General
-
Target
6d703a6444faf54c3a426ae7217f8daaa9835753abd8bbead34f8f0dde815320
-
Size
3.5MB
-
Sample
240625-we3naawhln
-
MD5
952f6a46bb9ed2319c83d1e194d1ab2b
-
SHA1
194b4e1ecac1a9a59222317df94164842ed5e12a
-
SHA256
6d703a6444faf54c3a426ae7217f8daaa9835753abd8bbead34f8f0dde815320
-
SHA512
1e836279e75ddc4ffa9a8ce010c59311c4886358a334510a43401a03ffeb6f042fa83814e82d1e3cfaa45e075470763cc2060d37c8cc3703e866a765e640f54b
-
SSDEEP
49152:ACwsbCANnKXferL7Vwe/Gg0P+WhBumFfj+RAkDTs+z6Ud4:Lws2ANnKXOaeOgmhBumFL+ikDTs+z
Static task
static1
Behavioral task
behavioral1
Sample
6d703a6444faf54c3a426ae7217f8daaa9835753abd8bbead34f8f0dde815320.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
6d703a6444faf54c3a426ae7217f8daaa9835753abd8bbead34f8f0dde815320
-
Size
3.5MB
-
MD5
952f6a46bb9ed2319c83d1e194d1ab2b
-
SHA1
194b4e1ecac1a9a59222317df94164842ed5e12a
-
SHA256
6d703a6444faf54c3a426ae7217f8daaa9835753abd8bbead34f8f0dde815320
-
SHA512
1e836279e75ddc4ffa9a8ce010c59311c4886358a334510a43401a03ffeb6f042fa83814e82d1e3cfaa45e075470763cc2060d37c8cc3703e866a765e640f54b
-
SSDEEP
49152:ACwsbCANnKXferL7Vwe/Gg0P+WhBumFfj+RAkDTs+z6Ud4:Lws2ANnKXOaeOgmhBumFL+ikDTs+z
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-