Behavioral task
behavioral1
Sample
7af28174299973cdebb194797d7b59a0b56271d9f788a478bcbc2193931d4e6d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7af28174299973cdebb194797d7b59a0b56271d9f788a478bcbc2193931d4e6d.dll
Resource
win10v2004-20220812-en
General
-
Target
7af28174299973cdebb194797d7b59a0b56271d9f788a478bcbc2193931d4e6d
-
Size
104KB
-
MD5
56c6ffcd389e832d66d7aec3ac487e0c
-
SHA1
11fb5e1ee45fdbff9f9a7518cebb59d1569c0776
-
SHA256
7af28174299973cdebb194797d7b59a0b56271d9f788a478bcbc2193931d4e6d
-
SHA512
829c66d0e5faa708cf07c4febb46d8f5775dd3759532ed9158ac7959cba89067ba9b09850481c65f1d2bec0b5802071864b7d9ab5047ff2aab6f66695f9f300e
-
SSDEEP
1536:E0Bq3fthxo0IdSgb8Bb5165VuRci/rPfBiEQ72mw7uKPpcDs:VBOTI8h7UVuRh/DBiEQcaKPpcDs
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
7af28174299973cdebb194797d7b59a0b56271d9f788a478bcbc2193931d4e6d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 73KB - Virtual size: 43KB
Size: 128KB - Virtual size: 4B
���� Size: 89KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
Size: 120KB - Virtual size:
Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA