Behavioral task
behavioral1
Sample
f5e5830b0166c93658be288b8897c4cb0eb784fb5624ee9b939b27d3b6385130.exe
Resource
win7-20220812-en
General
-
Target
f5e5830b0166c93658be288b8897c4cb0eb784fb5624ee9b939b27d3b6385130
-
Size
185KB
-
MD5
2c92c5a3a46fcdd1855533bac6c409df
-
SHA1
6c5e15524abaecae587319abe9ff9213752ff5d2
-
SHA256
f5e5830b0166c93658be288b8897c4cb0eb784fb5624ee9b939b27d3b6385130
-
SHA512
5da62956b344c8b3b46ad8fd83241078725caf481129f6076f0af4c70341a21cf66763350c5076ac63f6ae125a3820b47fe1dab185b72447b215f3effc9eecbd
-
SSDEEP
3072:GiufODb1qInfNgL8hii3142BZc8yDS95OXGJYjH6k+OwPL:GuByohC1S7pJYjH6kuz
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
f5e5830b0166c93658be288b8897c4cb0eb784fb5624ee9b939b27d3b6385130.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ