Behavioral task
behavioral1
Sample
51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b.exe
Resource
win10v2004-20230703-en
General
-
Target
51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b
-
Size
112KB
-
MD5
361750576fad00b4e2735954aa3d8de8
-
SHA1
5c404940a97f77fba55b48d4c9871267db183187
-
SHA256
51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b
-
SHA512
7b19e18d53a37f9fc1d6154463acfeff9420638fe1a8d1effba5bb9f065a0a2dd649e6e8d141bcf081e9f3f15abe4f8a603bfce167160157081e3a39dbbbdef4
-
SSDEEP
1536:vF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z:vF6F15h/zIn5S1aj+cU9CEw9aINej
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b
Files
-
51915ba8c7a9c21f56d6a73f35d9c99f30a7e7247b3b48077db3f36bc662329b.exe windows