Behavioral task
behavioral1
Sample
c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f.exe
Resource
win10v2004-20230915-en
General
-
Target
c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f
-
Size
112KB
-
MD5
a2b1207970e3a63658e546aa4fecf7ce
-
SHA1
c60806a8fa03311f8c401a6c89a6b75e3ea24d58
-
SHA256
c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f
-
SHA512
4cf376006bb020390898de554b295eded024408cdab85eda93c1260f944a0c2099afc5b85852be8da65dd307350d1de3a1d190a7d11b505e6c384d2ec98f3a91
-
SSDEEP
3072:pF6F15h/zIn5S1aj+cU9C8bXgTw9aINej:aFjhLI5SG+F79aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f
Files
-
c55457ef36b9fe404fef1fef781b8f97f8f351486449d1a153a4f036b152da6f.exe windows:6 windows
Headers