General
-
Target
4971cf2bda519fcdb21fc188af98dc70fdd14b146031e2df9a3bbc7ce9e00d79
-
Size
5.7MB
-
Sample
240626-gj5aca1enq
-
MD5
caab21b94bec99efba56c6426a2f9ba0
-
SHA1
b2bd18524842dabf5438b8eb92ac7466635f0359
-
SHA256
4971cf2bda519fcdb21fc188af98dc70fdd14b146031e2df9a3bbc7ce9e00d79
-
SHA512
2fd288ce12da09a0701af8fc6dde522287d0de028a57b8c0aa228dbcce7b15fec0da6a0b04529aeb0cffb8a29455344ada89e394159fd452fbdd6f816e8f2127
-
SSDEEP
98304:4ZJt4HINy2LkTktNZl33RZMmUFqnbBjnpzvJSIf42T5B7FJYLrBI:eiINy2LkT8jWmUFqnbBjpoIf35B7FJYq
Static task
static1
Behavioral task
behavioral1
Sample
4971cf2bda519fcdb21fc188af98dc70fdd14b146031e2df9a3bbc7ce9e00d79.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
4971cf2bda519fcdb21fc188af98dc70fdd14b146031e2df9a3bbc7ce9e00d79
-
Size
5.7MB
-
MD5
caab21b94bec99efba56c6426a2f9ba0
-
SHA1
b2bd18524842dabf5438b8eb92ac7466635f0359
-
SHA256
4971cf2bda519fcdb21fc188af98dc70fdd14b146031e2df9a3bbc7ce9e00d79
-
SHA512
2fd288ce12da09a0701af8fc6dde522287d0de028a57b8c0aa228dbcce7b15fec0da6a0b04529aeb0cffb8a29455344ada89e394159fd452fbdd6f816e8f2127
-
SSDEEP
98304:4ZJt4HINy2LkTktNZl33RZMmUFqnbBjnpzvJSIf42T5B7FJYLrBI:eiINy2LkT8jWmUFqnbBjpoIf35B7FJYq
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-