Behavioral task
behavioral1
Sample
80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd.exe
Resource
win10v2004-20230703-en
General
-
Target
80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd
-
Size
112KB
-
MD5
a6303612ffc909fb0a22ff4d0de08f33
-
SHA1
555949b1ac29441ffbd940b66eee3e33286344f4
-
SHA256
80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd
-
SHA512
0710131c6f627b6346609eccfe9288900eaebdaca6817b7408419727a1ed75ec49e6cf049e86f0cb057494c2f7e821392397fc7860a5bed28bef3a09223d2aea
-
SSDEEP
3072:aF6F15h/zIn5S1aj+cU9C8DAg2w9aINej:BFjhLI5SG+FT9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd
Files
-
80a4e50d0f2b86726dcb130b298978028c96a5d430733f82502e8ee1b7c0b2fd.exe windows