Behavioral task
behavioral1
Sample
2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb.exe
Resource
win10v2004-20230703-en
General
-
Target
2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb
-
Size
112KB
-
MD5
f3d2ca2d3374233f89cdc2a24a6cf588
-
SHA1
4cb7d048210ecdd5422e1a217e0e11d2b06feca3
-
SHA256
2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb
-
SHA512
c822ea175e8514828257ec6599267780ad389f95761576e968b5d9ffc19e728ce94a651bdada9b4a0cf1149a86434ca4184b049ce001a119e46e5d7143759a4c
-
SSDEEP
3072:bF6F15h/zIn5S1aj+cU9C8VNgxw9aINej:0FjhLI5SG+FZ9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb
Files
-
2c437bc690a8327709b261b4e6a5de783d91c3d2d6f3f08d606b96028250e4eb.exe windows