General
-
Target
9792476027ff5b619e6661f6849b863ca637cf98e3722f4d0137fd23896536a2
-
Size
3.5MB
-
Sample
240625-wme7ysvalf
-
MD5
0ccf417e646076e4088bb67b7e1caab3
-
SHA1
c6b7ce15919a6e6ed479d1cc70f5e2537eddfe12
-
SHA256
9792476027ff5b619e6661f6849b863ca637cf98e3722f4d0137fd23896536a2
-
SHA512
f35ccb54c78161466c1fb45329e69dfa8e81f983b8a204ce1f2203b3c7d3147939ce63440166d775f6c75a873b4cf71d7994620c29a65d3dacfa1d22a4c2464a
-
SSDEEP
49152:7CwsbCANnKXferL7Vwe/Gg0P+WhRm7J3jgI+rTvDzp:ews2ANnKXOaeOgmhS3jTOzp
Static task
static1
Behavioral task
behavioral1
Sample
9792476027ff5b619e6661f6849b863ca637cf98e3722f4d0137fd23896536a2.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
9792476027ff5b619e6661f6849b863ca637cf98e3722f4d0137fd23896536a2
-
Size
3.5MB
-
MD5
0ccf417e646076e4088bb67b7e1caab3
-
SHA1
c6b7ce15919a6e6ed479d1cc70f5e2537eddfe12
-
SHA256
9792476027ff5b619e6661f6849b863ca637cf98e3722f4d0137fd23896536a2
-
SHA512
f35ccb54c78161466c1fb45329e69dfa8e81f983b8a204ce1f2203b3c7d3147939ce63440166d775f6c75a873b4cf71d7994620c29a65d3dacfa1d22a4c2464a
-
SSDEEP
49152:7CwsbCANnKXferL7Vwe/Gg0P+WhRm7J3jgI+rTvDzp:ews2ANnKXOaeOgmhS3jTOzp
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-