Behavioral task
behavioral1
Sample
557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3.exe
Resource
win10v2004-20230703-en
General
-
Target
557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3
-
Size
112KB
-
MD5
45b94b5be83462c408d5e7ca506c224e
-
SHA1
8f64b44d7a9b3952d5c05d41b743cafb573a87a4
-
SHA256
557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3
-
SHA512
53d19206edb08aaae83833322459db24370767af988697c348793e3ac03d7381bcea5ba57b566119da069bda5f85a50cb8a04bcb9f041c2cc25d1b0695d2478b
-
SSDEEP
3072:eF6F15h/zIn5S1aj+cU9C8EEgiw9aINej:9FjhLI5SG+FG9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3
Files
-
557a22c6b205ef7abbd9407cb479b9a6abab3f8fc0ba7cb061c1b9e12d7bf1e3.exe windows