Behavioral task
behavioral1
Sample
3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb.exe
Resource
win10v2004-20230703-en
General
-
Target
3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb
-
Size
112KB
-
MD5
259abded3c5ebe7939ea27b043cacbd8
-
SHA1
e6634152552bf57e2046af4573a17b73aa8edcb9
-
SHA256
3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb
-
SHA512
a707b2ecdd907fb7b7e85c5e5e7abffbb3542dc17d22d94d4fa658914c24490917898bde7feac9ff93367a23b5855f59ef9b182435b9677dc3da203495491b47
-
SSDEEP
3072:eF6F15h/zIn5S1aj+cU9C8SZglw9aINej:9FjhLI5SG+F89aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb
Files
-
3f5fe3284414fdb66ff91f7208154ad0da415ebe6282004b1eb2e8091d7213eb.exe windows