Behavioral task
behavioral1
Sample
e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78.exe
Resource
win10v2004-20230703-en
General
-
Target
e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78
-
Size
112KB
-
MD5
0a46444fb4d3ed20205dffb5e2901e41
-
SHA1
358a896773403b72b0fd30d4000cdde98f825a3e
-
SHA256
e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78
-
SHA512
42708e5e2593a46075069eb7661224e7cd7072cc4645825b118ed524916943f089a12925a15a17c759ccd528e27ad9ac4d4c4852fb2bc71ae004a32211645699
-
SSDEEP
3072:aF6F15h/zIn5S1aj+cU9C8VOg2w9aINej:BFjhLI5SG+F39aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78
Files
-
e8a377d778dd66eb52b327212332586d0eab2b705bcf935710b24ad4af0e8b78.exe windows