Behavioral task
behavioral1
Sample
671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b.exe
Resource
win10v2004-20240802-en
General
-
Target
671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b
-
Size
109KB
-
MD5
f64df74e65d82bad7e3d89fa0dfe41e3
-
SHA1
924983f85e16e227c1ad567f17b50c476a4cf291
-
SHA256
671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b
-
SHA512
173662f0ef06871dc9732a6dd37eccbc666011dbdae4fc7cc7f247e03f9b32dab34cbef79876f8d2471a77312b4090060feea3bd9ba5cfa1ce4cec6b181453da
-
SSDEEP
3072:4LF6F15h/zIn5S1aj+cU9C8HgGw9aINej+:9FjhLI5SG+Fq9aIAC
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b
Files
-
671c8731d4bb0d6b2d26095d5fb7654777e3913ab44821a87a26a905cc62a07b.exe windows:6 windows
Headers