Behavioral task
behavioral1
Sample
9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200.exe
Resource
win10v2004-20230831-en
General
-
Target
9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200
-
Size
112KB
-
MD5
b9041b2eff4772ac6ea4e90d8f5c2e58
-
SHA1
5318c92e994df11dd46edc6b2a7536994586a765
-
SHA256
9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200
-
SHA512
2ff031e61001c42f0dc98757be9f11709634032f6be3d1c0cbae3bc1fe427c0813309f0aba750251560cfe2b9341b1c38cd55a607edb9e2a5285f1620db1f70f
-
SSDEEP
3072:AF6F15h/zIn5S1aj+cU9C8EIgAw9aINej:fFjhLI5SG+F89aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200
Files
-
9d90096c3745c5987a533c2331cbb4443e53e2a95af03eeac5e8cc68a6a8d200.exe windows