Behavioral task
behavioral1
Sample
523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be.exe
Resource
win10v2004-20240802-en
General
-
Target
523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be
-
Size
109KB
-
MD5
8cdb2c9dee62d894d8ca557728f869b3
-
SHA1
7c9d504af30a692e8dd3a77a6fa7bff844cf29ec
-
SHA256
523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be
-
SHA512
f657fd8184c8e2d04f6732ad5dc2b99a7883660c4469da11e268d57799784a641abdb94821856c63d9ef93f2644a24e16ffe66c40c8ae18d0948557a4d50d564
-
SSDEEP
1536:wF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zQ:wF6F15h/zIn5S1aj+cU9CEw9aINejQ
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be
Files
-
523dcea966e0b5dd1d5f9dbd34587b316008dfcde9aaebc485960d4b209ed7be.exe windows:6 windows
Headers