General
-
Target
286c4f89ebe4facabdd3a8a43ef5e715d9da996001f6aa835c9b9ccb5f5d7c53
-
Size
2.0MB
-
Sample
240625-xn996axarh
-
MD5
56a6a360f4fa36b69dfef44b80198665
-
SHA1
70d8c2ea445cb5f559adb6176d2295b91292ddd0
-
SHA256
286c4f89ebe4facabdd3a8a43ef5e715d9da996001f6aa835c9b9ccb5f5d7c53
-
SHA512
327a47560ad420889a06d5f7127186081dba105143368d79cc121a8bdc778ae3841c9f6a89775dace01d91a6f0df642ebccb6e7b34214dd0b3042631f1b81a66
-
SSDEEP
49152:u89XJt4HIZ/Gg0P+WhZpeudhZPItx2apeapelI:HZJt4HIZOgmhWudstUvlI
Static task
static1
Behavioral task
behavioral1
Sample
286c4f89ebe4facabdd3a8a43ef5e715d9da996001f6aa835c9b9ccb5f5d7c53.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
286c4f89ebe4facabdd3a8a43ef5e715d9da996001f6aa835c9b9ccb5f5d7c53
-
Size
2.0MB
-
MD5
56a6a360f4fa36b69dfef44b80198665
-
SHA1
70d8c2ea445cb5f559adb6176d2295b91292ddd0
-
SHA256
286c4f89ebe4facabdd3a8a43ef5e715d9da996001f6aa835c9b9ccb5f5d7c53
-
SHA512
327a47560ad420889a06d5f7127186081dba105143368d79cc121a8bdc778ae3841c9f6a89775dace01d91a6f0df642ebccb6e7b34214dd0b3042631f1b81a66
-
SSDEEP
49152:u89XJt4HIZ/Gg0P+WhZpeudhZPItx2apeapelI:HZJt4HIZOgmhWudstUvlI
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-