Behavioral task
behavioral1
Sample
34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd.exe
Resource
win10v2004-20240802-en
General
-
Target
34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd
-
Size
109KB
-
MD5
27ae47e6e6ca12eb1a99e4c93ac25561
-
SHA1
48dfe2d583dc38f711cb31b08a4086e8852698b5
-
SHA256
34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd
-
SHA512
89a09c25c30660bdd2c2b0822a99cb74ebd9aba81b15c1be10550b797a513a409e7a57571a2620278c81923c714d253eb1327aa2ec7c0315258ed055a828b647
-
SSDEEP
1536:RF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z+:RF6F15h/zIn5S1aj+cU9CEw9aINej+
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd
Files
-
34057c7e3e45d71f6f2431e0b7780919929a2733b928d909ffaf119018d135fd.exe windows:6 windows
Headers