Behavioral task
behavioral1
Sample
c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b.exe
Resource
win10v2004-20240709-en
General
-
Target
c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b
-
Size
112KB
-
MD5
1ebb4acc376a7c45f0a5a37ec1572661
-
SHA1
89b8ea5225de1ee701bbb706bf80d84dd0dc079d
-
SHA256
c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b
-
SHA512
16e0b11c9f82cf3bb33a8932572d53f049d603b3bdf9625aa860b385a3f40b238bae7b33fd62526d4430fe2195585e22875ddcf71977f63ab9d41f79b5594e0f
-
SSDEEP
1536:g8F6FQ85LFiGkSzyqzin5SP9cljcfcU9CIw9aINe3z:BF6F15h/zIn5S1aj+cU9CIw9aINej
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b
Files
-
c0a291f2c6b7a2f5ae111884c4951074080971b36da1387f774a49c6ae19bb8b.exe windows:6 windows
Headers