Behavioral task
behavioral1
Sample
781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271.exe
Resource
win10v2004-20240508-en
General
-
Target
781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271
-
Size
112KB
-
MD5
1a78ff1e4dc0c9bba77d16d269182032
-
SHA1
02e5d8c44003f7a8733123d30dbed53cac8b6a9b
-
SHA256
781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271
-
SHA512
0f7bc941b8b967422044b215bd842d68bc1b47a24caef7d5db4ba7979524f1b3a8346bb8a3b6502bb8aeaaa3c1a0495e25348cb89c248f9cb3031201d8ebe8fd
-
SSDEEP
3072:dF6F15h/zIn5S1aj+cU9C8DZgfw9aINej:GFjhLI5SG+FB9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271
Files
-
781c59355aaa54532754cfdf7131e9023728789ca073a509a298b3b2324af271.exe windows:6 windows
Headers