General
-
Target
46ede35a5cc542c05849e70837f9143b0089bbe68213c71e485a641ef4df9c26
-
Size
1.4MB
-
Sample
241119-ft1jgazhpc
-
MD5
0707884da99a853123705d24390b9110
-
SHA1
3880d2e1fb9754c4a74a2b8070806b2ca2d4941a
-
SHA256
46ede35a5cc542c05849e70837f9143b0089bbe68213c71e485a641ef4df9c26
-
SHA512
10e26fc85b6e584efca70a43653974417032ef37143f2530ad6176998c5121a4539eb1965dd75e00d7de14d0dbeccce5f80f7bb82f522aa8c9485acf47be2074
-
SSDEEP
24576:F39WaOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:598HPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
46ede35a5cc542c05849e70837f9143b0089bbe68213c71e485a641ef4df9c26.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
46ede35a5cc542c05849e70837f9143b0089bbe68213c71e485a641ef4df9c26
-
Size
1.4MB
-
MD5
0707884da99a853123705d24390b9110
-
SHA1
3880d2e1fb9754c4a74a2b8070806b2ca2d4941a
-
SHA256
46ede35a5cc542c05849e70837f9143b0089bbe68213c71e485a641ef4df9c26
-
SHA512
10e26fc85b6e584efca70a43653974417032ef37143f2530ad6176998c5121a4539eb1965dd75e00d7de14d0dbeccce5f80f7bb82f522aa8c9485acf47be2074
-
SSDEEP
24576:F39WaOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:598HPkVOBTK
-
Gh0st RAT payload
-
Gh0strat family
-
Purplefox family
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1