Behavioral task
behavioral1
Sample
ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103.exe
Resource
win10v2004-20240802-en
General
-
Target
ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103
-
Size
109KB
-
MD5
e5f301e279d472585a4d3c61484a3a28
-
SHA1
5f1ea0d090bca7d9d77a3d04e65699f2066fd550
-
SHA256
ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103
-
SHA512
8149d80be365f11d4fcc090bb713e312fc7e93662621cdf0bf2422c6f4d92826f920f956199601a793c6a20881af7aec2e2ec345c08f4aa72364a23e39659668
-
SSDEEP
1536:sF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zZ:sF6F15h/zIn5S1aj+cU9CEw9aINejZ
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103
Files
-
ae91a7742b38d2da2949e7b352e3b1d310d10d8b5701290745bcdbadeb8c7103.exe windows:6 windows
Headers