Behavioral task
behavioral1
Sample
710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a.exe
Resource
win10v2004-20240802-en
General
-
Target
710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a
-
Size
109KB
-
MD5
247b20efc6d36eb79346119196f2bb1c
-
SHA1
7234e5cc7f50b0ad83f46d5031208624e9b678cf
-
SHA256
710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a
-
SHA512
400123795aea1b3d286bd9bb6190b69fc802a6e315323c27665fcc2990c9d55888b656d6ae64dba8b49e81c92dd2129b8c3eefe24f544b98161d860d4ba6f859
-
SSDEEP
1536:ogF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z3:ogF6F15h/zIn5S1aj+cU9CEw9aINej3
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a
Files
-
710d7b923e0a938a3e766819b6d73f6b76c125c83b00b1bef69263fd5fd4df4a.exe windows:6 windows
Headers