Behavioral task
behavioral1
Sample
7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af.exe
Resource
win10v2004-20240802-en
General
-
Target
7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af
-
Size
109KB
-
MD5
259827baab83a69ebc051b0450d00a0b
-
SHA1
3ef0c40f32ff3c02b408ccd34f78288a74b659cc
-
SHA256
7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af
-
SHA512
324136ce4a537069f66bd6f23b6ff6c842487fcfc528117c6b7e36f214d574a63e4986f50b7a3e15877e415b3b4a4a85470727c16e74546cccb92646a5f1d6e1
-
SSDEEP
1536:1CF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3za:MF6F15h/zIn5S1aj+cU9CEw9aINeja
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af
Files
-
7420ec965a996abcb0b74056e5453ba6feaaf542caa8f6e8f7cebe513441f2af.exe windows:6 windows
Headers