Behavioral task
behavioral1
Sample
6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6.exe
Resource
win10v2004-20240802-en
General
-
Target
6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6
-
Size
109KB
-
MD5
1e4624cc19f562ebde800649950cee93
-
SHA1
bb8d61bf3ef9eaa0a30c10c135dbb3910e8a8ac4
-
SHA256
6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6
-
SHA512
1c55bcd1d73d138ea527aa757e5a4f618a3ac92a4efab3b66cae32fefa1469596db30705c1b3e01391beec9de241f7795cc0a253c98243955ea4998a9943017e
-
SSDEEP
3072:8F6F15h/zIn5S1aj+cU9C8dg5w9aINejn:TFjhLI5SG+Fb9aIAD
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6
Files
-
6638031b1087789fcce5d60cd80bd4bb8a509077b14c76db279f08ac6a18c1c6.exe windows:6 windows
Headers