Behavioral task
behavioral1
Sample
256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756.exe
Resource
win10v2004-20240730-en
General
-
Target
256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756
-
Size
112KB
-
MD5
e6aeb2ac1b4728324472460a1472f14f
-
SHA1
776d2018af3624c2aea8a58304e859abee226aae
-
SHA256
256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756
-
SHA512
1138f4d7891883370463113517e44c7860df469f4a0cb57c0690da4bddb574f5c8f4058918e1c9095fc42e3fd40c441cbe9c1c5b7d715cadaa4981b0c346ad0a
-
SSDEEP
1536:VqkF6FQ85LFiGkSzyqzin5SP9cljcfcU9CIw9aINe3z:VjF6F15h/zIn5S1aj+cU9CIw9aINej
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756
Files
-
256105963b9afa9322f0845ff9bcbfa12fdfb62bf0bd060d6b7821bc6181f756.exe windows:6 windows
Headers