Behavioral task
behavioral1
Sample
ba6537c812874f5bc1cf1a7d036b098af1fbdd2b36f6e5a038f3c5c969daadb3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba6537c812874f5bc1cf1a7d036b098af1fbdd2b36f6e5a038f3c5c969daadb3.dll
Resource
win10v2004-20221111-en
General
-
Target
ba6537c812874f5bc1cf1a7d036b098af1fbdd2b36f6e5a038f3c5c969daadb3
-
Size
111KB
-
MD5
9654b9844364e29c67941abbcedf3c50
-
SHA1
b10cce25a027248bb5acece77c1e89a6071e12d6
-
SHA256
ba6537c812874f5bc1cf1a7d036b098af1fbdd2b36f6e5a038f3c5c969daadb3
-
SHA512
b9388e9f1808cb517e338b4518b2c9475830e321972f2dab473a206564cb474464dc47691f742e591d806addfb7fec07dbb5bffe4703957fb22a7d0f00df8fa1
-
SSDEEP
768:Q7OqxhYfNWo/zom4o6Dp7f1kSD5QYtXyS8cXBM7eJzql:g5efVZv6h9jo2rql
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
Files
-
ba6537c812874f5bc1cf1a7d036b098af1fbdd2b36f6e5a038f3c5c969daadb3.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ