General
-
Target
f17551082a9e650f6d1b2def54a46a5788efb11144547d0b5db3b137a3d9d69d
-
Size
1.3MB
-
Sample
241211-vt57aaskbv
-
MD5
8c8ec8c6889ce6efcb5e78801b0e7372
-
SHA1
4953fc26267d1ae140b79d23e36de5a6221a8332
-
SHA256
f17551082a9e650f6d1b2def54a46a5788efb11144547d0b5db3b137a3d9d69d
-
SHA512
2a0d4dee2b08f41a5a33c7354eab786b2693c374d120db8ad727d131b98ef8024cfd011407f403b63652803be20226efad81e85a036276be4ff3dc06484f5b0b
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNr:QHPkVOBTK
Static task
static1
Behavioral task
behavioral1
Sample
f17551082a9e650f6d1b2def54a46a5788efb11144547d0b5db3b137a3d9d69d.exe
Resource
win7-20241010-en
Malware Config
Targets
-
-
Target
f17551082a9e650f6d1b2def54a46a5788efb11144547d0b5db3b137a3d9d69d
-
Size
1.3MB
-
MD5
8c8ec8c6889ce6efcb5e78801b0e7372
-
SHA1
4953fc26267d1ae140b79d23e36de5a6221a8332
-
SHA256
f17551082a9e650f6d1b2def54a46a5788efb11144547d0b5db3b137a3d9d69d
-
SHA512
2a0d4dee2b08f41a5a33c7354eab786b2693c374d120db8ad727d131b98ef8024cfd011407f403b63652803be20226efad81e85a036276be4ff3dc06484f5b0b
-
SSDEEP
24576:dOyHutimZ9VSly2hVvHW6qMnSbTBBhBMNr:QHPkVOBTK
-
Gh0st RAT payload
-
Gh0strat family
-
Purplefox family
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1