Behavioral task
behavioral1
Sample
a193b6fed6aa60da49159400d7297b60N.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
120 seconds
Behavioral task
behavioral2
Sample
a193b6fed6aa60da49159400d7297b60N.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
120 seconds
General
-
Target
a193b6fed6aa60da49159400d7297b60N
-
Size
109KB
-
MD5
a193b6fed6aa60da49159400d7297b60
-
SHA1
a9a5fe8e95ae2ba49588737cbc2d18ad8ff25f7e
-
SHA256
ea8cd91b5fdf11f53f2e326a3b7b61666fea2841f793828ea80c32f19217ed8c
-
SHA512
ef9840b2b02bbc5c6c0a66a197eed72c5796434bd2fafcba603f523496c36100f9d7447e39df15db4431bb433c31a6fd4fbd9de3091d42a7273e847f70aac524
-
SSDEEP
1536:CF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zY:CF6F15h/zIn5S1aj+cU9CEw9aINejY
Score
10/10
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a193b6fed6aa60da49159400d7297b60N
Files
-
a193b6fed6aa60da49159400d7297b60N.exe windows:6 windows
Headers