Behavioral task
behavioral1
Sample
3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5.exe
Resource
win10v2004-20240426-en
General
-
Target
3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5
-
Size
112KB
-
MD5
1d3ad636519a42d6d4e60cc26fa0b67f
-
SHA1
2b3bfa1f758471d58934bb27915b57e37a7aa6b3
-
SHA256
3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5
-
SHA512
0bd2c790c22ab20870c6002f3a6f2b92cf12412408f302378a95f1bb8448bfdf57f9c6e6955bc45e1f9c0e09c13d4dfbe2c5fd715fbc42017714a5835fe4cf72
-
SSDEEP
3072:/F6F15h/zIn5S1aj+cU9C8HRgdw9aINej:AFjhLI5SG+Ff9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5
Files
-
3e6c1d467d0e09e3e2edc0624689d8912112ba23b567646eb88bf4d411062fa5.exe windows:6 windows
Headers