Behavioral task
behavioral1
Sample
3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92.exe
Resource
win10v2004-20230915-en
General
-
Target
3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92
-
Size
112KB
-
MD5
b815518a1fe7363ad4ea0909e8ac2503
-
SHA1
627905011c7e7acdfb2461df658c4f5b616b24aa
-
SHA256
3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92
-
SHA512
5c3e5a294cb0452a1fec8b980fb1aa1a6fc0f0bcaf651f9fa109f2fdb3119f77c2648123abf498c9cdace618559ccb19259ce1ac612404810bb0ffbd498f9c2f
-
SSDEEP
3072:SF6F15h/zIn5S1aj+cU9C8M4gew9aINej:pFjhLI5SG+Fa9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92
Files
-
3cc9538630443fb87655681cc97bc9a5e2f092936ee0871070e26136116b8f92.exe windows:6 windows
Headers