Behavioral task
behavioral1
Sample
8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d.exe
Resource
win10v2004-20230703-en
General
-
Target
8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d
-
Size
112KB
-
MD5
af0f4a49807d69694f5fc58fffb8daec
-
SHA1
8938106dfc583345e7a46858da39b713eeaa3d40
-
SHA256
8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d
-
SHA512
90e5c2f87c2d105fd6c9551108b8631b9d2a8726c8d44dcacb59997a6017e438d92c379e1e8c8b0db7d115fd95f79b5916407e044f08c7074c647432e41d765a
-
SSDEEP
3072:pF6F15h/zIn5S1aj+cU9C8JXgTw9aINej:aFjhLI5SG+F19aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d
Files
-
8ebc91d40426897a882f00ab6c340f2bbf617af13c35c920c76463ac99f85f9d.exe windows