Behavioral task
behavioral1
Sample
f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db.exe
Resource
win10v2004-20240709-en
General
-
Target
f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db
-
Size
112KB
-
MD5
013c15f7d07e82db439cd29bb5e48a12
-
SHA1
58bad383e13a334209646f277611156908ba9efc
-
SHA256
f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db
-
SHA512
6db6a9bfc2b514c4577c8048439cd6b8477486017069dd5eb6535622b46581beecbbc68f879a1c6dbe993a701d71b793cdcc2a131246ea43b08c32c3e73b263a
-
SSDEEP
3072:xF6F15h/zIn5S1aj+cU9C8V3grw9aINej:SFjhLI5SG+Ft9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db
Files
-
f70f073ec75a5b037c3e4f92635c8e0f3a0628965a4587079b5e41e71ff725db.exe windows:6 windows
Headers