General
-
Target
f4b16e4e851707f601e711cdfabbc2fc03f15222435b245a892f7d3e0d20bb35
-
Size
1.5MB
-
Sample
240726-n86m2azfla
-
MD5
93787852f45ed3fa042a48297a158fa2
-
SHA1
ff37f18306a82810e37d15dbc3121a5707bc8f0a
-
SHA256
f4b16e4e851707f601e711cdfabbc2fc03f15222435b245a892f7d3e0d20bb35
-
SHA512
249fe96e1c941f37385173ee5641124c69fbbe426d94ce88eb096e9462d293e84c2478d356fa44e1dfff1b5e8f5c83b03262219d5805a4081f054252c69fd2af
-
SSDEEP
24576:B09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+wnGLgO:B09XJt4HIN2H2tFvduySgO
Static task
static1
Behavioral task
behavioral1
Sample
f4b16e4e851707f601e711cdfabbc2fc03f15222435b245a892f7d3e0d20bb35.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
f4b16e4e851707f601e711cdfabbc2fc03f15222435b245a892f7d3e0d20bb35
-
Size
1.5MB
-
MD5
93787852f45ed3fa042a48297a158fa2
-
SHA1
ff37f18306a82810e37d15dbc3121a5707bc8f0a
-
SHA256
f4b16e4e851707f601e711cdfabbc2fc03f15222435b245a892f7d3e0d20bb35
-
SHA512
249fe96e1c941f37385173ee5641124c69fbbe426d94ce88eb096e9462d293e84c2478d356fa44e1dfff1b5e8f5c83b03262219d5805a4081f054252c69fd2af
-
SSDEEP
24576:B09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+wnGLgO:B09XJt4HIN2H2tFvduySgO
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1