Behavioral task
behavioral1
Sample
464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94.exe
Resource
win10v2004-20230703-en
General
-
Target
464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94
-
Size
112KB
-
MD5
5abb9e3fe154a469ab61d253e527c366
-
SHA1
dbafbaf9320510929e05536743bdb5320259ddfc
-
SHA256
464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94
-
SHA512
4122a58b1bffd2cd5eeee112c8e3c433ff13d580edb2af7cb7b93911e6f91d8c5172d1b6bd6a883ecc38aaed0c1a81db2a74f1b5ddfc433d09f7ed5418ed4424
-
SSDEEP
3072:bF6F15h/zIn5S1aj+cU9C8YHgxw9aINej:0FjhLI5SG+FA9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94
Files
-
464f65c13162f482e9f5d89d803167315b11523dc622dcf140504183b8190b94.exe windows