Behavioral task
behavioral1
Sample
ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040.exe
Resource
win10v2004-20230703-en
General
-
Target
ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040
-
Size
112KB
-
MD5
c6aeaded954d5918215d45f9bcaaf8dc
-
SHA1
65fdaf1a0ec75c99e7527e26b39466998311f30c
-
SHA256
ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040
-
SHA512
a56ab44a8eee1149ce6e213ad69c43a9c4436440552f9c961d17ba061078275cd07e9bbc011c1eaf1343d66f985817840dc561b81c5446f088a8c138a36ebe13
-
SSDEEP
3072:QF6F15h/zIn5S1aj+cU9C8DGgQw9aINej:vFjhLI5SG+F79aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040
Files
-
ac439c16cfafcc0883f855742332d0b5355a80ac2bb0905a4ef04c31a4bb8040.exe windows