Behavioral task
behavioral1
Sample
5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073.exe
Resource
win10v2004-20240709-en
General
-
Target
5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073
-
Size
112KB
-
MD5
759b952467607c84ca9d62d78953ac0e
-
SHA1
6873dce38249f1d1ed0abcfbd47a052c43805fb1
-
SHA256
5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073
-
SHA512
45120004c3d47a08f36dc90f65203077261a7d8c943d91bb74d56028524231503a00a7f329e6ff3bb76d6a7856869686b808098fbf1f804e34fe7c8effb988f9
-
SSDEEP
3072:FF6F15h/zIn5S1aj+cU9C8EhgXw9aINej:eFjhLI5SG+Fc9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073
Files
-
5480241f89f61aeddfa97bf380126f06620c90422621a863bf76dcdad0393073.exe windows:6 windows
Headers