Behavioral task
behavioral1
Sample
bb7533d429a5e9e2329217e15fdacc556d95ff821f564909e98ae2c349e33254.dll
Resource
win7-20220812-en
5 signatures
150 seconds
General
-
Target
bb7533d429a5e9e2329217e15fdacc556d95ff821f564909e98ae2c349e33254
-
Size
140KB
-
MD5
6932b4ad1acca4c040e8103aaf9add58
-
SHA1
d17c14b27e9fd074ade9a98cffee281d621f6414
-
SHA256
bb7533d429a5e9e2329217e15fdacc556d95ff821f564909e98ae2c349e33254
-
SHA512
2456bc8bcd4f7a1fbda2cb69c7f1930264b711a2b73475114bc70c492a1e4fd7114be9338c36d308c3bc475f7f7577a50c27526df5657af30f25158ede31e2a2
-
SSDEEP
3072:5vGTKCPx/ua4IXGLLVJ/nY6pL1lgGvTBftfKmHN3+s:8Oo/x4FvR1l1vTBlfKmHN37
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
bb7533d429a5e9e2329217e15fdacc556d95ff821f564909e98ae2c349e33254.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 95KB - Virtual size: 52KB
Size: 147KB - Virtual size: 4B
���� Size: 115KB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: 140KB - Virtual size: 140KB
Size: - Virtual size: