General
-
Target
03dbdd345724aed293c3aa58ac5b426ddad7d7a6cdd28da694ed006f996bd702
-
Size
6.9MB
-
Sample
240625-xtq4gaxdkc
-
MD5
98b7746c46e7efab2ebb35d8e6e21081
-
SHA1
8ab4e15f679c36f62ef06c32eaba8fbbc8f42e98
-
SHA256
03dbdd345724aed293c3aa58ac5b426ddad7d7a6cdd28da694ed006f996bd702
-
SHA512
fbe2e74d266c76a98e83705df6cc64cd9e711ac0ac7955fe8d96604db1290e1b9a538d43c3d724d246bd6cef6c0003eef8b6fa3eedcfd2544755f837e5dd4011
-
SSDEEP
98304:zws2ANnKXOaeOgmhsH46666666666666666666666666666666x666666666666z:VKXbeO72SMHPXqrwDvxdM91NQsRyUQ3
Static task
static1
Behavioral task
behavioral1
Sample
03dbdd345724aed293c3aa58ac5b426ddad7d7a6cdd28da694ed006f996bd702.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
03dbdd345724aed293c3aa58ac5b426ddad7d7a6cdd28da694ed006f996bd702
-
Size
6.9MB
-
MD5
98b7746c46e7efab2ebb35d8e6e21081
-
SHA1
8ab4e15f679c36f62ef06c32eaba8fbbc8f42e98
-
SHA256
03dbdd345724aed293c3aa58ac5b426ddad7d7a6cdd28da694ed006f996bd702
-
SHA512
fbe2e74d266c76a98e83705df6cc64cd9e711ac0ac7955fe8d96604db1290e1b9a538d43c3d724d246bd6cef6c0003eef8b6fa3eedcfd2544755f837e5dd4011
-
SSDEEP
98304:zws2ANnKXOaeOgmhsH46666666666666666666666666666666x666666666666z:VKXbeO72SMHPXqrwDvxdM91NQsRyUQ3
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-