Behavioral task
behavioral1
Sample
e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62.exe
Resource
win10v2004-20240910-en
General
-
Target
e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62
-
Size
109KB
-
MD5
3cf24c0031b560f96d5a00845d35d9a5
-
SHA1
caaae0c5c2efbb13c241094aafaf536480f2f81f
-
SHA256
e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62
-
SHA512
f8b2fca7870605da330e600c5627e06f755ddb8c55cac7ebde1d1b0b9264e35c8c2e89bd3dda491827bb4aca7dfa584f9d43cc5c3c1e17fb0b35ee8fae98b272
-
SSDEEP
3072:VF6F15h/zIn5S1aj+cU9C8lgGw9aINejB:uFjhLI5SG+FI9aIAt
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62
Files
-
e5dabadef4696f25ce99771b684b07b4c84fdca2620da10993f1c5f5308c6b62.exe windows:6 windows
Headers