General
-
Target
c9710475abcb4c035cce4a873737b91d7588658cdba16b3724885827337a9e1f
-
Size
5.5MB
-
Sample
240705-ftgflataqr
-
MD5
d97914ca8bf32061fb519ddd9963d775
-
SHA1
6dbe3af8a5c0a223b0cc0cf0a768944113114b8d
-
SHA256
c9710475abcb4c035cce4a873737b91d7588658cdba16b3724885827337a9e1f
-
SHA512
c5ec3f835d3b35b11f9607729ef4ee821df6949c1a4b3dee6613fd3165f7996cb15a17f1ea404e0edad87828d01a921c9901423ab42d577d2690708f0ab83d3f
-
SSDEEP
98304:BGdVyVT9nOgmh4ffXXlWr4qv/qkFcrTx/AW6pffbkwZm59AvDfhYyLr1Pd:+WT9nO78PXsrbUTAHbkwA59Azpr1l
Static task
static1
Behavioral task
behavioral1
Sample
c9710475abcb4c035cce4a873737b91d7588658cdba16b3724885827337a9e1f.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
c9710475abcb4c035cce4a873737b91d7588658cdba16b3724885827337a9e1f
-
Size
5.5MB
-
MD5
d97914ca8bf32061fb519ddd9963d775
-
SHA1
6dbe3af8a5c0a223b0cc0cf0a768944113114b8d
-
SHA256
c9710475abcb4c035cce4a873737b91d7588658cdba16b3724885827337a9e1f
-
SHA512
c5ec3f835d3b35b11f9607729ef4ee821df6949c1a4b3dee6613fd3165f7996cb15a17f1ea404e0edad87828d01a921c9901423ab42d577d2690708f0ab83d3f
-
SSDEEP
98304:BGdVyVT9nOgmh4ffXXlWr4qv/qkFcrTx/AW6pffbkwZm59AvDfhYyLr1Pd:+WT9nO78PXsrbUTAHbkwA59Azpr1l
-
Gh0st RAT payload
-
Drops file in Drivers directory
-
Server Software Component: Terminal Services DLL
-
Sets service image path in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-