Behavioral task
behavioral1
Sample
f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6.exe
Resource
win10v2004-20230824-en
General
-
Target
f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6
-
Size
112KB
-
MD5
e31827fa77ab95574e7462ca53b99008
-
SHA1
3d883f5221dbc24717055b466c9f0217cc678425
-
SHA256
f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6
-
SHA512
ebae3bc27ed23bfa73d6828817591f4ca860238e8baf414cfacc27cfadb97d2538d4a152c70ad996f55fc6beb19dc57a8e5b1dff193cc33eb0e69efb4eb6a662
-
SSDEEP
3072:jF6F15h/zIn5S1aj+cU9C849gpw9aINej:sFjhLI5SG+Fy9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6
Files
-
f8a7cb22a9906a06a12f6ab56563aad290282c05044566d47a2a3af25f0665d6.exe windows