Behavioral task
behavioral1
Sample
c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12.exe
Resource
win10v2004-20240802-en
General
-
Target
c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12
-
Size
109KB
-
MD5
55aaf9e1f02504314b5c824b0e50c180
-
SHA1
4503f7416b38d9d76ea28531378d6046fb9b950f
-
SHA256
c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12
-
SHA512
3736cb50b809983dac5c9a0cc18986b3a79b5f56c70192fb9b6cb08c366236295c72b01c30318d29a3808f3a6945a69735635df959762f37c178ebc2f8d6e07b
-
SSDEEP
1536:aF6FQ85LFiGkSzyqzin5SP9cljcfcU9CBg5w9aINe3zb:aF6F15h/zIn5S1aj+cU9CBg5w9aINejb
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12
Files
-
c9e208946c73f1309da087f3ec0ba67c331db1a300aa19d9dbbe0e05fd8d8a12.exe windows:6 windows
Headers