Analysis
-
max time kernel
147s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
07/01/2024, 19:37
Behavioral task
behavioral1
Sample
a670e06370d6e5fd680b8b9ef6367021.exe
Resource
win7-20231129-en
3 signatures
150 seconds
General
-
Target
a670e06370d6e5fd680b8b9ef6367021.exe
-
Size
202KB
-
MD5
a670e06370d6e5fd680b8b9ef6367021
-
SHA1
b0cfe6e7117a37cbd71c6d53ad1e823701f5d5da
-
SHA256
02ec221529ac40438f1299bdc31672c16f242fcfbf61c35ff1e53b25608c8d15
-
SHA512
9acca61359d55ed858c03bf4b3352e19c3d0cfd299b521523222c985242d9efb5a0eb15733c30b3735d459f0b30fbd0330818cd5b6abbc43aa046a5ee5049872
-
SSDEEP
3072:EAxxClZbgMiXyxezdcNj12JIHdAht0ukLFyBkIA9WuqqDbyWTBft4MzNtOZ:EkDMVQfJXtV0RIkWuqqDuWTBl4QOZ
Malware Config
Signatures
-
Gh0st RAT payload 2 IoCs
resource yara_rule behavioral1/memory/2912-0-0x0000000000400000-0x0000000000438309-memory.dmp family_gh0strat behavioral1/memory/2912-1-0x0000000000400000-0x0000000000438309-memory.dmp family_gh0strat -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2912 a670e06370d6e5fd680b8b9ef6367021.exe