Behavioral task
behavioral1
Sample
ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f.exe
Resource
win10v2004-20240802-en
General
-
Target
ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f
-
Size
109KB
-
MD5
da3384fdba1d1058ecbe4a35f744ff4a
-
SHA1
dbfeffe206aea770ffcad2804b86897a4c40771a
-
SHA256
ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f
-
SHA512
0d52c2fe2e657411a3cf1c826fabbb5357070ea82377144106124a89e23347e7171002da3beb403fb06308a10629157a7ece48b8c6668815a24f180447dc1f75
-
SSDEEP
3072:8F6F15h/zIn5S1aj+cU9C8cgGw9aINejU:TFjhLI5SG+FP9aIA4
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f
Files
-
ad731e05fb1a99a3baed302f5e338afc420f2fbcbc2e9d96744d09afdb76cd9f.exe windows:6 windows
Headers