Behavioral task
behavioral1
Sample
9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a.exe
Resource
win10v2004-20230703-en
General
-
Target
9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a
-
Size
112KB
-
MD5
08f705d2e2b66d7e1a56072cc7ae5580
-
SHA1
21530055085b9a65bed79c54b708c319ff25b2fb
-
SHA256
9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a
-
SHA512
b0da5211210b08ec090532ffee303f51d29d2db1d39d6e0c2687628a445ebadaa000de55af055e2fd7c71f7ac053027ea92c5994b352e75e86a3f778d0cf1182
-
SSDEEP
3072:iF6F15h/zIn5S1aj+cU9C84uguw9aINej:5FjhLI5SG+F09aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a
Files
-
9ece2aab4e019eff3be6c7a7d73c080c39bc01b3c88d947f5cb4c0eed2bd8f7a.exe windows