Behavioral task
behavioral1
Sample
e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511.exe
Resource
win10v2004-20240802-en
General
-
Target
e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511
-
Size
109KB
-
MD5
f9eff8b559209d06cc9bb9cc934a98ad
-
SHA1
c2c335596db2cb9a778c893d934dec5941708f48
-
SHA256
e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511
-
SHA512
f92b876bfd7c5a81352669c570a61eb7db01a7ce93ac8649e2b06809efb4eeab6a014da2b0d8391f9e842931a3fe65c9d7c1483444075109d5042ec9ff2997b8
-
SSDEEP
1536:lSF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zT:YF6F15h/zIn5S1aj+cU9CEw9aINejT
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511
Files
-
e6c069b1a1f4a5450dd0b1de3c2307f142c73ac565be0357a85d300ef114f511.exe windows:6 windows
Headers