Behavioral task
behavioral1
Sample
f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb.exe
Resource
win10v2004-20231025-en
General
-
Target
f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb
-
Size
112KB
-
MD5
a3e1cc4a494863b60bd1d9e8e7c13bdb
-
SHA1
0a99aafc59c37324528d1af4aad49bfc43288a1a
-
SHA256
f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb
-
SHA512
d16e035e66738f1ea2e73c860074a04651bc28023f131f911f2a4d348606d672bd3af3515054772ca6ca5f42c6b0e9f7e58bb0719ee2f87a5c63b15f09e4cd2d
-
SSDEEP
3072:WF6F15h/zIn5S1aj+cU9C8ZBgtw9aINej:lFjhLI5SG+Fd9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb
Files
-
f51bc0632c0e6b7aa7b55db65dd8a768af27a3d99e88a17e0ca9c126e279bfcb.exe windows:6 windows
Headers