Behavioral task
behavioral1
Sample
20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2.exe
Resource
win10v2004-20240802-en
General
-
Target
20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2
-
Size
109KB
-
MD5
58a1738a7ef9a5bee7c9cd9d15df1734
-
SHA1
1f2b8c0a13f1ea8f0873359c44fe9f92555f08c0
-
SHA256
20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2
-
SHA512
ee41867c2d57621cb61265a479743a966a57646413229918316f6aaf603e4238ab9ad5d9858e5038b3b90009d9c152ec32989b7100a7f6b0b070364d90b21482
-
SSDEEP
1536:yAF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zC:HF6F15h/zIn5S1aj+cU9CEw9aINejC
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2
Files
-
20f905dca612c3b999234bc79cc4ffa1fda582c3a0ef05064e42a3e83b1eb5c2.exe windows:6 windows
Headers