Behavioral task
behavioral1
Sample
0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676.exe
Resource
win10v2004-20240709-en
General
-
Target
0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676
-
Size
112KB
-
MD5
cc72cec37a6de07da822b31c02c4a1bf
-
SHA1
31dc0bff9f8d73a60329adf46863dd3a111f076f
-
SHA256
0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676
-
SHA512
360a358f619cf70ecc0cbfdb8cda490cba02a56bf13511faa08563683743190077bb6d464660ce120c4c7813c293ebf4146a4f62770df1fa4adf9761c9ea0818
-
SSDEEP
3072:JF6F15h/zIn5S1aj+cU9C8j1gzw9aINej:6FjhLI5SG+FJ9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676
Files
-
0c0ad88987cb4c1ed6e67eda51e46721bf16e3f81df24c4247f751ac3dbb6676.exe windows:6 windows
Headers