Behavioral task
behavioral1
Sample
7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53.dll
Resource
win10v2004-20240412-en
General
-
Target
7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53
-
Size
98KB
-
MD5
c43ea7b6387dff895b5faa9ac73a6d25
-
SHA1
7cc1ad14bd7a17fa631d763b6a319dec37332a87
-
SHA256
7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53
-
SHA512
3dedc165c52efdbc858b6d491871fd78dc6ab45a66cc06a84e84d6ea0f116504bd13375646a752a629619d29256c7b4e1cc599b55509957634c651d0db3ef4b9
-
SSDEEP
3072:k0GjoP/qHGp3cFIDwtlcdqzWm/Z7kUaNG:TGjE/qfF1lkOj/ZIUa
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53
Files
-
7dd11df2c9ec410c768b466af7da92c23cdd96471163c36f8a7c7ff94ade2f53.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ