Behavioral task
behavioral1
Sample
cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d.exe
Resource
win10v2004-20240802-en
General
-
Target
cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d
-
Size
109KB
-
MD5
7628cad2012f14fdb9fb3fd004ff55e7
-
SHA1
0b6a438a597035197b25bb7f0af4d466a355d5a1
-
SHA256
cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d
-
SHA512
84c4ebdf523e50af632aeeed831426600f7ad91e497d3eeae6c77787f7badf89b5f3ab0b67e355c331769e5f9cf1de17859dd80a1ca277ccc30d3f41befe4977
-
SSDEEP
1536:cF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zg:cF6F15h/zIn5S1aj+cU9CEw9aINejg
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d
Files
-
cfdf1b201a95ebd41ef7d99c10afdd3d6ae27c9130a02b0b69ebfde54eb1895d.exe windows:6 windows
Headers