General
-
Target
e78500da11623a878713d789ae6889169961f9defed816b74a00ff451b35838f
-
Size
5.8MB
-
Sample
240625-xtargszdqp
-
MD5
9a8f1229448543ae470a970ee50963e4
-
SHA1
dba6e595a3f4cb8c0458a9742ac77851d7238b9a
-
SHA256
e78500da11623a878713d789ae6889169961f9defed816b74a00ff451b35838f
-
SHA512
089868f2431f8e9ac8d85f9db4666e2c06a775eb5d74ccc597334ba598a5424dad954234362727844c59f54c691abb7ab048c58d639c75032f013e9b08f04608
-
SSDEEP
98304:LGdVyVT9nOgmhZ5dyWRudqIqf7m6666666666666666666666666666666x6666j:4WT9nO7Rol7S7MMHPXqrwDvxdM91NQsK
Static task
static1
Behavioral task
behavioral1
Sample
e78500da11623a878713d789ae6889169961f9defed816b74a00ff451b35838f.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
e78500da11623a878713d789ae6889169961f9defed816b74a00ff451b35838f
-
Size
5.8MB
-
MD5
9a8f1229448543ae470a970ee50963e4
-
SHA1
dba6e595a3f4cb8c0458a9742ac77851d7238b9a
-
SHA256
e78500da11623a878713d789ae6889169961f9defed816b74a00ff451b35838f
-
SHA512
089868f2431f8e9ac8d85f9db4666e2c06a775eb5d74ccc597334ba598a5424dad954234362727844c59f54c691abb7ab048c58d639c75032f013e9b08f04608
-
SSDEEP
98304:LGdVyVT9nOgmhZ5dyWRudqIqf7m6666666666666666666666666666666x6666j:4WT9nO7Rol7S7MMHPXqrwDvxdM91NQsK
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-