Behavioral task
behavioral1
Sample
9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5.exe
Resource
win10v2004-20230915-en
General
-
Target
9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5
-
Size
112KB
-
MD5
aa1a4a3331208c13f60b4150d0333f01
-
SHA1
b4cd0a8b64164c6840513c12cf9a8d151bf8bc65
-
SHA256
9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5
-
SHA512
8f0566195ccbd1e3178dbc67ce8e2f7f1c7922600b22c5a2265c7a1f7402eef3eff29708ac8fe57bc3726e479c6f1632b3cbddefaf025b0417a03eef48618936
-
SSDEEP
1536:rfFeDiqlakB4ODRuI6N0Gz5j0PcHl7fkK2Ou9aINe3z:rfFeD1l1VxOZ0PYlLkK2Ou9aINej
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5
Files
-
9c5ca9e6e6f1a87c16e7409f95570845c546271aab93338a57f883f1659a49d5.exe windows:6 windows
Headers