Behavioral task
behavioral1
Sample
0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee.exe
Resource
win10v2004-20240802-en
General
-
Target
0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee
-
Size
109KB
-
MD5
ef944c1328478ba0ea1faaf38fe390db
-
SHA1
d1bcc59a966d1cf995979be646e0958a9eec2f08
-
SHA256
0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee
-
SHA512
0b0cdf09e107bb7bfd02e22e017f163ffb0e06ba35831030a661877095eda48c68d7fd96b0afaf08fd2a7fe7645efbe19108004959b803a55b4095e4f8e79450
-
SSDEEP
3072:4aF6F15h/zIn5S1aj+cU9C82Mw9aINej+:QFjhLI5SG+F69aIAC
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee
Files
-
0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee.exe windows:6 windows
Headers