Behavioral task
behavioral1
Sample
7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63.exe
Resource
win10v2004-20240802-en
General
-
Target
7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63
-
Size
109KB
-
MD5
41f347e0029a4e0fd2d85379cdaec202
-
SHA1
0b6fe4696702eb2fe3a4bed7a76cce5b80c3239d
-
SHA256
7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63
-
SHA512
010884e2bd77dbef4fb7009bbbbf658c7828e861e13220c6c6e963797ae28ee9f3fffb6e79586662f10da83367021138ec102af256dfaaa81a74425186a3f0ab
-
SSDEEP
1536:BF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z3:BF6F15h/zIn5S1aj+cU9CEw9aINej3
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63
Files
-
7ea1981a3e82e22fbf0f3e77830468a46d3a42f19c57f9f48b14c3b3872e2f63.exe windows:6 windows
Headers