Behavioral task
behavioral1
Sample
83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd.exe
Resource
win10v2004-20240802-en
General
-
Target
83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd
-
Size
109KB
-
MD5
f42451a1f8c8e79d68e0118493d295ce
-
SHA1
399c016c5076a1c4d1a7c42a4f769d0c0f9dddbe
-
SHA256
83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd
-
SHA512
6fed2a12f6355f2f9561feb36ab46c301a0377574353ed4406c55fc92f44e154e5ce83d5afd2b6b335cb19e45c7411bb52a891df0e80e631707c61a2c78d5b29
-
SSDEEP
1536:OF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zn:OF6F15h/zIn5S1aj+cU9CEw9aINejn
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd
Files
-
83ac3993494d4015f9b4e7b35c557e387ac648cdffcb361acecaea3675df92fd.exe windows:6 windows
Headers