Behavioral task
behavioral1
Sample
869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da.exe
Resource
win10v2004-20230915-en
General
-
Target
869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da
-
Size
112KB
-
MD5
08728fd86d1ee24fc079c1d2ddac98cf
-
SHA1
5f4b1deb7e6d632fc9bf7a4fcf5d25fb360e5c21
-
SHA256
869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da
-
SHA512
e8f9f80d99948306f2be0125b9535e657ddc25289ffc6eaef4c3edc58bcd241905ac78835f2f85570a013b0c3ffaaefe88547900f0cde5b99ce5d24b5e7ce91e
-
SSDEEP
3072:1F6F15h/zIn5S1aj+cU9C8YbgHw9aINej:OFjhLI5SG+Fm9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da
Files
-
869995e50ebd4a8c71ea1c98aaf718b9c5be8f7690c99e0d17ac5d0a924df6da.exe windows:6 windows
Headers