General
-
Target
92a2086230dceed9c4a70bf3ed492ef94add727cd62636c68b9cea06a881f89b
-
Size
9.6MB
-
Sample
240626-b87h4sxele
-
MD5
c4c87c8667774954e25bcdd75e8cdeaf
-
SHA1
360fff714cc14384b63596942b873f90f08d71a7
-
SHA256
92a2086230dceed9c4a70bf3ed492ef94add727cd62636c68b9cea06a881f89b
-
SHA512
fc50846b78a98b6e92409e90bae9c5aafe5af365a78eb340487186ec5a41f3935ee9303959410834789fd063d84b19f7d3b34c7a1301844352a5f369497e9b10
-
SSDEEP
98304:Lws2ANnKXOaeOgmh2iIbVUvucW6pAN3Upyj5RiR7JTfHs29+YEF1cP8Fk0XZnj:NKXbeO7YZUvhpSsRs29+YEF1cP8FkKn
Behavioral task
behavioral1
Sample
92a2086230dceed9c4a70bf3ed492ef94add727cd62636c68b9cea06a881f89b.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
92a2086230dceed9c4a70bf3ed492ef94add727cd62636c68b9cea06a881f89b
-
Size
9.6MB
-
MD5
c4c87c8667774954e25bcdd75e8cdeaf
-
SHA1
360fff714cc14384b63596942b873f90f08d71a7
-
SHA256
92a2086230dceed9c4a70bf3ed492ef94add727cd62636c68b9cea06a881f89b
-
SHA512
fc50846b78a98b6e92409e90bae9c5aafe5af365a78eb340487186ec5a41f3935ee9303959410834789fd063d84b19f7d3b34c7a1301844352a5f369497e9b10
-
SSDEEP
98304:Lws2ANnKXOaeOgmh2iIbVUvucW6pAN3Upyj5RiR7JTfHs29+YEF1cP8Fk0XZnj:NKXbeO7YZUvhpSsRs29+YEF1cP8FkKn
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-