General
-
Target
b2d08694683da8361056a31860a22cde1ad51f8843bce42dfc5cf5501c7bbb51
-
Size
11.9MB
-
Sample
240626-gl9mva1fnq
-
MD5
a986d5a97fce38e2c028c5ed26a2d23f
-
SHA1
13ffc8dda0a86dd1098778617624f5337dc62565
-
SHA256
b2d08694683da8361056a31860a22cde1ad51f8843bce42dfc5cf5501c7bbb51
-
SHA512
20d07f1e1f3b9550208d9eb0332215e896d8f9dd376e0b3acfa145657d9d411f4f5c206dce3a997cbdd3d5e62920495c1b331f84bef90e0e961fa50e5524ebee
-
SSDEEP
196608:IWT9nO7Vol7S7X4adWhxSd/FUpoWyKAozKY4TPLKAouKn:M7Vol7SjjdWxu/mpodKACXCzKATY
Static task
static1
Behavioral task
behavioral1
Sample
b2d08694683da8361056a31860a22cde1ad51f8843bce42dfc5cf5501c7bbb51.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
b2d08694683da8361056a31860a22cde1ad51f8843bce42dfc5cf5501c7bbb51
-
Size
11.9MB
-
MD5
a986d5a97fce38e2c028c5ed26a2d23f
-
SHA1
13ffc8dda0a86dd1098778617624f5337dc62565
-
SHA256
b2d08694683da8361056a31860a22cde1ad51f8843bce42dfc5cf5501c7bbb51
-
SHA512
20d07f1e1f3b9550208d9eb0332215e896d8f9dd376e0b3acfa145657d9d411f4f5c206dce3a997cbdd3d5e62920495c1b331f84bef90e0e961fa50e5524ebee
-
SSDEEP
196608:IWT9nO7Vol7S7X4adWhxSd/FUpoWyKAozKY4TPLKAouKn:M7Vol7SjjdWxu/mpodKACXCzKATY
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-