Behavioral task
behavioral1
Sample
8e97793e7083aca844eb8fde0e5512abfe71c00635b3fbbfe3f19869e4d5fca3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e97793e7083aca844eb8fde0e5512abfe71c00635b3fbbfe3f19869e4d5fca3.dll
Resource
win10v2004-20220812-en
General
-
Target
8e97793e7083aca844eb8fde0e5512abfe71c00635b3fbbfe3f19869e4d5fca3
-
Size
148KB
-
MD5
20002392c6a28f10ab6fb9ba04b7a4df
-
SHA1
8f71f91394303af97fb3dc1aabb063e56d9093e4
-
SHA256
8e97793e7083aca844eb8fde0e5512abfe71c00635b3fbbfe3f19869e4d5fca3
-
SHA512
514fc7238de7cd5b7d603bd6fbf8a217b2ad371147e48326ff4dcc4315415e463bec820939e8dc414b10213777980d5563fca92e6355e89dcea98cb1f037b7ba
-
SSDEEP
3072:GG9v4j6B/Wg/5y14VGlZ2WRDiPb3TBft8nI+HtLl:GgvwaH/g1h7hiPb3TBl8nI+HtL
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
8e97793e7083aca844eb8fde0e5512abfe71c00635b3fbbfe3f19869e4d5fca3.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 96KB - Virtual size: 56KB
Size: 156KB - Virtual size: 4B
���� Size: 120KB - Virtual size:
Size: 148KB - Virtual size:
Size: - Virtual size: