Behavioral task
behavioral1
Sample
e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da.exe
Resource
win10v2004-20240802-en
General
-
Target
e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da
-
Size
109KB
-
MD5
55958e459570530eac566fa337833a31
-
SHA1
0cf6396d3bb08bf0d952c28055cd7cd16a757d08
-
SHA256
e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da
-
SHA512
893a6a8aecd87e73a2554ea46aa5029d00a3b90f2cd515b539fd05c4fc37be151402ffa0e1e89e5e6a1b07e7336b0ae636272b22c8d2637395d77feafeb3d1b7
-
SSDEEP
1536:FF6FQ85LFiGkSzyqzin5SP9cljcfcU9Cig5w9aINe3za:FF6F15h/zIn5S1aj+cU9Cig5w9aINeja
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da
Files
-
e8074abfd766599e830c2f2f5244c61e9a30b151aec16df777c3e2a2d9eb17da.exe windows:6 windows
Headers