Behavioral task
behavioral1
Sample
32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95.exe
Resource
win10v2004-20240802-en
General
-
Target
32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95
-
Size
109KB
-
MD5
7f598b5808a07e8249e4cc01da74e6f2
-
SHA1
1ebf38c73debcadce2dca12dcd8911f8ef2d890e
-
SHA256
32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95
-
SHA512
591707f5a5d6320271a3a4446859220995257a57f690903951182e9f9a886b586211ff9718baac9b2f13663c0542c9157d26fbb1277ce3cc4dda84f72a611e43
-
SSDEEP
1536:aF6FQ85LFiGkSzyqzin5SP9cljcfcU9CHg5w9aINe3zn:aF6F15h/zIn5S1aj+cU9CHg5w9aINejn
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95
Files
-
32a944545d1d88ee9a718c1738b88067cc57e89ca71e5dc938ebca3a3daa5e95.exe windows:6 windows
Headers