Behavioral task
behavioral1
Sample
3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0.exe
Resource
win10v2004-20240802-en
General
-
Target
3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0
-
Size
109KB
-
MD5
ce17331d4a4a1765643a7029ad31d273
-
SHA1
dc8ae5ac3fb8d410cd38b25f80976f0915d8a5c1
-
SHA256
3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0
-
SHA512
298e25ba91f4a92b34fbdf59360cd1239c1fc1b666c1c41c6025118fdc6273c6d542f63b53ec6557216bcacf34b0d0468cdb57a5b4c5cd21b81a89f829bc1f30
-
SSDEEP
1536:4sF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z+:4sF6F15h/zIn5S1aj+cU9CEw9aINej+
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0
Files
-
3be02b8a77fdc8bd8f18edc14d2d6c4a694996500b2e69181641cd42d2b123f0.exe windows:6 windows
Headers