General
-
Target
019608b79fae2894575c34bfeab3cbc72f6f2d5b6c7ddb6e509003062b829b8a
-
Size
1.5MB
-
Sample
240701-ezp49azamq
-
MD5
4a2aecb824ab51d6ce24f25babe7c0a1
-
SHA1
9bc679a003d220d86975dbc23a5ce997ac224855
-
SHA256
019608b79fae2894575c34bfeab3cbc72f6f2d5b6c7ddb6e509003062b829b8a
-
SHA512
616612df3dbea44c4e2652c5598346dc2c06eef7ace65a6f46eee7cad8aa4fa5c9725ce96ac345ab3efd3120d7864d93a3d06ad3cf2819b8ebfac65bd3ed6dbb
-
SSDEEP
24576:k09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+7:k09XJt4HIN2H2tFvduySt
Static task
static1
Behavioral task
behavioral1
Sample
019608b79fae2894575c34bfeab3cbc72f6f2d5b6c7ddb6e509003062b829b8a.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
019608b79fae2894575c34bfeab3cbc72f6f2d5b6c7ddb6e509003062b829b8a
-
Size
1.5MB
-
MD5
4a2aecb824ab51d6ce24f25babe7c0a1
-
SHA1
9bc679a003d220d86975dbc23a5ce997ac224855
-
SHA256
019608b79fae2894575c34bfeab3cbc72f6f2d5b6c7ddb6e509003062b829b8a
-
SHA512
616612df3dbea44c4e2652c5598346dc2c06eef7ace65a6f46eee7cad8aa4fa5c9725ce96ac345ab3efd3120d7864d93a3d06ad3cf2819b8ebfac65bd3ed6dbb
-
SSDEEP
24576:k09tv9/7JtDElDEExIko2H2HESq2eWJ6MQjySjy+7:k09XJt4HIN2H2tFvduySt
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-