Behavioral task
behavioral1
Sample
92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67.exe
Resource
win10v2004-20240709-en
General
-
Target
92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67
-
Size
112KB
-
MD5
e9d8ae05339a412fb38a6052632b20c0
-
SHA1
ae9e462f96ecd347ffe84c55ce2632648e0d1f77
-
SHA256
92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67
-
SHA512
4e07c1739592dd1fa6233e9b355b46d7e6a7fb3a662e0f5a12a91fdd5b5db696eefe3bb1106523468b4e84bc3684f02f1a93221a16e94d7cd7f694d77cdbb65d
-
SSDEEP
3072:xF6F15h/zIn5S1aj+cU9C8Edgrw9aINej:SFjhLI5SG+F89aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67
Files
-
92a9325d458a1d0d8e97d8d74fa367260d6e8f703fcb677135bdab9ec19f6e67.exe windows:6 windows
Headers