Behavioral task
behavioral1
Sample
5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1.exe
Resource
win10v2004-20240802-en
General
-
Target
5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1
-
Size
109KB
-
MD5
f83a8b79328a6716db4a7642077c38af
-
SHA1
4240c1245ca16673a31550ed3c6b2cda9fedd418
-
SHA256
5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1
-
SHA512
943cfe15312a7f55f79814c1e2f082602136064d725cbbcb5147fda3fdcad206f625ff0a4d78155a33e9d226d8126667e1c6a2062913eaf997362be517b99816
-
SSDEEP
3072:IF6F15h/zIn5S1aj+cU9C80gGw9aINejR:XFjhLI5SG+Fn9aIAN
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1
Files
-
5c23c27f4e24e99a718178e920313fdcbfb2302c690595cc4fbdc078d62318a1.exe windows:6 windows
Headers