Behavioral task
behavioral1
Sample
5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f.exe
Resource
win10v2004-20240802-en
General
-
Target
5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f
-
Size
109KB
-
MD5
a0daf0dcb8a7ce105aa1de068a1ac770
-
SHA1
2c5a6592a6cc01fd3a3ba6e65cad86dfaa860e05
-
SHA256
5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f
-
SHA512
0386fbe0bbda48be3cfb419596a6df69d704fb2afe93037e021d14f159356db93a02061cd16e45524a71ddde8e588af31b8bf552c3b7dae9815e22311a8960c0
-
SSDEEP
3072:4FF6F15h/zIn5S1aj+cU9C2gGw9aINej+:DFjhLI5SG+FM9aIAC
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f
Files
-
5edda7c36f3fbcc6f6ec116f68b1f30bad9c7b54e91c6b8e6c54ccdde237a19f.exe windows:6 windows
Headers