Behavioral task
behavioral1
Sample
aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4.exe
Resource
win10v2004-20240802-en
General
-
Target
aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4
-
Size
109KB
-
MD5
a3267b31695abd26696bf0c183708111
-
SHA1
d82e8bd3382d42b6935c79d324722badf55abd41
-
SHA256
aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4
-
SHA512
884404def05f3336f3e58895439203076e771fafb1b2e3f29cd9e5f7aa51b1d107dfa867ec771b1249911fcdc7f1634479de251cf8504fb690cbe86b8f2b68eb
-
SSDEEP
3072:sF6F15h/zIn5S1aj+cU9C8Kg5w9aINejR:DFjhLI5SG+FW9aIAN
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4
Files
-
aa44f6df3a2e191c35972b9e75de2d8823ee8044e1d21db4c9898d37c84aa6c4.exe windows:6 windows
Headers