Behavioral task
behavioral1
Sample
9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791.exe
Resource
win10v2004-20240802-en
General
-
Target
9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791
-
Size
109KB
-
MD5
f6a7e988fee275e641d0206fb27e5ffe
-
SHA1
689303cfa75b4a2a75e408baac2b30de36ec5a52
-
SHA256
9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791
-
SHA512
f78c83da102f59eb620717f4f5e038e5ca24d9d6b7520948a1d35caa59e9abf4c82fcc75218f71cc9bf82b6c15ad54789905edd2e053b690973b19ef70ee3179
-
SSDEEP
1536:IF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3za:IF6F15h/zIn5S1aj+cU9CEw9aINeja
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791
Files
-
9cdbd865f06413e90ac031de3c9e5051094b8e674781d48533e14a98e9d32791.exe windows:6 windows
Headers