Behavioral task
behavioral1
Sample
7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220.exe
Resource
win10v2004-20240226-en
General
-
Target
7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220
-
Size
112KB
-
MD5
f60f3189c6923d24e86a517ecaf0b2d8
-
SHA1
496b15c8c99530586441bf42d0b6cc532c6d79e9
-
SHA256
7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220
-
SHA512
94f295f56d3d3a4c8687b99d4acb016e6617ba2d14c2c754ff9df3da21be18fe3b396d69022906ede4a076ea5f581c5d2c8bed60d6dba9686236fbf32a6eeae5
-
SSDEEP
3072:kF6F15h/zIn5S1aj+cU9C8Xqgsw9aINej:rFjhLI5SG+Fn9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220
Files
-
7bd65bc80c9edf81d94c555d84053d663212ed2ed65d8cda98bc3ecd354be220.exe windows:6 windows
Headers