General
-
Target
fc6e6f81c1b20dbd8eae2c1478daab44a2a00c0fc9c0b6ae78dd1f71d61d095d
-
Size
2.4MB
-
Sample
240626-gf9qnaybkf
-
MD5
53e1bcd0d6973e1d42f0c5385e84de9c
-
SHA1
ec0d8c8a5a562c70369b45aec80affa90a660aa0
-
SHA256
fc6e6f81c1b20dbd8eae2c1478daab44a2a00c0fc9c0b6ae78dd1f71d61d095d
-
SHA512
35e76d5541eab4cc791e25c084204381131fe3a32b6560d1b9ae26ba94fdcc081b29daa15a4581e8ad2b0b8664ce709f493070ceee6046d74f8609f0646f5345
-
SSDEEP
49152:9QZAdVyVT9n/Gg0P+WhoeKyzoQTq8CCh/Iyys3my+Y64SyKy:mGdVyVT9nOgmhaeS8Z/lNIF
Static task
static1
Behavioral task
behavioral1
Sample
fc6e6f81c1b20dbd8eae2c1478daab44a2a00c0fc9c0b6ae78dd1f71d61d095d.exe
Resource
win7-20240611-en
Malware Config
Targets
-
-
Target
fc6e6f81c1b20dbd8eae2c1478daab44a2a00c0fc9c0b6ae78dd1f71d61d095d
-
Size
2.4MB
-
MD5
53e1bcd0d6973e1d42f0c5385e84de9c
-
SHA1
ec0d8c8a5a562c70369b45aec80affa90a660aa0
-
SHA256
fc6e6f81c1b20dbd8eae2c1478daab44a2a00c0fc9c0b6ae78dd1f71d61d095d
-
SHA512
35e76d5541eab4cc791e25c084204381131fe3a32b6560d1b9ae26ba94fdcc081b29daa15a4581e8ad2b0b8664ce709f493070ceee6046d74f8609f0646f5345
-
SSDEEP
49152:9QZAdVyVT9n/Gg0P+WhoeKyzoQTq8CCh/Iyys3my+Y64SyKy:mGdVyVT9nOgmhaeS8Z/lNIF
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-