Behavioral task
behavioral1
Sample
05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c.exe
Resource
win10v2004-20230703-en
General
-
Target
05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c
-
Size
112KB
-
MD5
037f8e316e44a4d71027af40b6f31246
-
SHA1
ffe35fa4fa2117d342140820c0b7d1b1ef6a3757
-
SHA256
05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c
-
SHA512
eaad059a1669ee12eba57b3145638b4549bdbdb9dc78235644ee5030bab206aa9e4328411eca6d19ca4ac81ab71370bb628b7b8a2b1f4657e9fd805ae7e0b9e5
-
SSDEEP
3072:WF6F15h/zIn5S1aj+cU9C8eCgqw9aINej:lFjhLI5SG+Fa9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c
Files
-
05e721db29492a41ba03d5e2cd4e3e17aa50dd4c118ce1a647df8ab08af81b0c.exe windows