Behavioral task
behavioral1
Sample
80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05.exe
Resource
win10v2004-20230703-en
General
-
Target
80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05
-
Size
112KB
-
MD5
15d75bbade1406577bc1831d58ff1f6e
-
SHA1
9120e100d3f65f608feb39d44c182f69633f45e6
-
SHA256
80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05
-
SHA512
1270e73fc8db7cd0210a77da08d1fdfdf6fc0b79a6f14b99d70fd385aeeb53fb216e570e87e64da893eeb2165c86c75f7e5c8dea5f8a1a84bf17bbe8a2a4fa60
-
SSDEEP
3072:dF6F15h/zIn5S1aj+cU9C8IZgfw9aINej:GFjhLI5SG+F09aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05
Files
-
80045d7ba22de136f0908c337209cb9c5f7ffd79842df5b29a0cc12edfe20d05.exe windows