Hostile 92% Download

Trojan.Win32.Dialer.adu

Trojan dialer with RAT indicators

Detects Gh0st RAT mentioned in Cylance' Ghost Dragon ReportPercent-encoded content decoded
SHA-256e328e3c82c53014a6c5d82ac38a9df847274fff6cfb4cf982f7fd1c9394e1c4c
MaleculeMdTh

Evidence

Percent-encoded content decoded 0x10dec–0x10ebc
⋯3 more rows
0x10e1c6e74726f6c5365745c53657276696365ntrolSet\Service
0x10e2c735c2573000000000d0a5b253032642fs\%s......[%02d/
0x10e3c253032642f256420253032643a253032%02d/%d %02d:%02
0x10e4c643a253032645d20282573290d0a0000d:%02d] (%s)....
⋯7 more rows
Detects Gh0st RAT mentioned in Cylance' Ghost Dragon Report 0x10f0c–0x110cc
⋯7 more rows
0x10f7c53746172740000005479706500000000Start...Type....
0x10f8c52656753657456616c75654578287374RegSetValueEx(st
0x10f9c61727429000000004572726f72436f6eart)....ErrorCon
0x10fac74726f6c000000004f626a6563744e61trol....ObjectNa
⋯18 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.