Behavioral task
behavioral1
Sample
9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c.exe
Resource
win10v2004-20240426-en
General
-
Target
9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c
-
Size
112KB
-
MD5
ec55220d025c53f6b25ed92c1ed6bc42
-
SHA1
3a1999f593554cac99ec0c7cbb2690f15558e6b7
-
SHA256
9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c
-
SHA512
df9974b2d81f9a4e34e05b3ff22b3c46d9f93aa27e16fbc6421441063c5687da2919e7f52993f956929a494b39ad4446e00b72c3f5a2621cf5c9b25028f1c624
-
SSDEEP
3072:5F6F15h/zIn5S1aj+cU9C8R/gjw9aINej:qFjhLI5SG+F59aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c
Files
-
9f3ebb4b70555b5ae81260ffdb0d85c1fa9f833e9526b72051059187094b476c.exe windows:6 windows
Headers