Behavioral task
behavioral1
Sample
29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2.exe
Resource
win10v2004-20240508-en
General
-
Target
29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2
-
Size
112KB
-
MD5
d3d954ba67ad352761832a8ce359aeb9
-
SHA1
dd8bc27055df704dbc4a199a8729fbd503acdff8
-
SHA256
29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2
-
SHA512
30eced5946c2c7b1d35e4938ba5dadd1f0b1026f893121572d3d1c2e3ed004aefe8966dbc3a42b49483266c3f1fd04ecee87af1a8470f0a500e483a5c3c71292
-
SSDEEP
3072:tF6F15h/zIn5S1aj+cU9C8DJgvw9aINej:WFjhLI5SG+Fh9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2
Files
-
29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2.exe windows:6 windows
Headers