Behavioral task
behavioral1
Sample
b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c.exe
Resource
win10v2004-20240802-en
General
-
Target
b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c
-
Size
109KB
-
MD5
a0b53b5259436717bd6e0f6452e3bc37
-
SHA1
1556da986fc08965f3fe7bc7eb063430c35106d4
-
SHA256
b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c
-
SHA512
ed5f43c8a643b4da9ec85bd8eb434210c3334780000b0e7551e1f9946dd6f59ea297f5eefeb36e079140c26fd2f8e270181400feb0a7889d6e072045e16daa0e
-
SSDEEP
1536:zF6FQ85LFiGkSzyqzin5SP9cljcfcU9CJg5w9aINe3zF:zF6F15h/zIn5S1aj+cU9CJg5w9aINejF
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c
Files
-
b0193d303d34ac58322610b6d2820f2ca7669f3ba478d094f03d5609f35d900c.exe windows:6 windows
Headers