Behavioral task
behavioral1
Sample
ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52.exe
Resource
win10v2004-20240508-en
General
-
Target
ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52
-
Size
112KB
-
MD5
a63b401a9060e7d0ede98c80ea155cee
-
SHA1
aa993307435cccf9a6fe0ec4f08ea1ebbb02402d
-
SHA256
ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52
-
SHA512
3c974b87099fe015e65bd825513927c0406790815a525c36b3d2e4fb1c7712f9fa1296b7cfc70108a5821b216ce265e57d56b5d665c9632223dc44412e124fe6
-
SSDEEP
3072:9F6F15h/zIn5S1aj+cU9C825g/w9aINej:mFjhLI5SG+FS9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52
Files
-
ea7ca9c29e48f3796b519c251d004e20e540f6aa048b1a022181a33e63925a52.exe windows:6 windows
Headers