Behavioral task
behavioral1
Sample
81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937.exe
Resource
win10v2004-20230703-en
General
-
Target
81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937
-
Size
112KB
-
MD5
a928fd5f26a81cc79053c5393df5ea60
-
SHA1
201d27bcfcb07a37cae0d27a672fe4b9821c0ac4
-
SHA256
81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937
-
SHA512
7850cc3ffc035aeca90af183892869dd6ec3a352e0aded4e91c54d4ab121c08e1457b86dc50efaaafd90e47f275882dd14bdab2dc24de06e8a0dd8a5fbce0c5c
-
SSDEEP
3072:0F6F15h/zIn5S1aj+cU9C8Dcg8w9aINej:7FjhLI5SG+Ft9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937
Files
-
81990234b12f29956b2e04bfe36461e74d0e660a616ea56a33e5140d61e6e937.exe windows