Behavioral task
behavioral1
Sample
382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d.exe
Resource
win10v2004-20240709-en
General
-
Target
382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d
-
Size
112KB
-
MD5
a40f2a0a2ccf0867b62f77fa9bfea25a
-
SHA1
d5daa6e003809f9369111479ccfc709f9fdc421d
-
SHA256
382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d
-
SHA512
b333d01d258b1435a2dfbd7d8ae959ca0e5bb86b4cbe5b4096ea3f52b90df69bb69a9617304bbb2c7d3dfa79a84c99360ac4a89cd16ddca0b6d144a3b1b99365
-
SSDEEP
3072:sF6F15h/zIn5S1aj+cU9C8hzgfw9aINej:DFjhLI5SG+Ft9aIA
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d
Files
-
382490e2b10de1126ab93eef4de1c4f7409a1a1e150b450f8afa752e4b9a9f3d.exe windows:6 windows
Headers