Behavioral task
behavioral1
Sample
f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da.exe
Resource
win10v2004-20240802-en
General
-
Target
f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da
-
Size
109KB
-
MD5
4213618765f1a5ae01d8659c50871f46
-
SHA1
cc142849af977d921cde8e058574b49734667ed5
-
SHA256
f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da
-
SHA512
97af2f5dc96fc972b5f20e28a28ed03393f5618ca59be4dfe77517c51be1c70a5287ec71a2a5a14de052899913cea214780a645107d917e151b94a7945cf1342
-
SSDEEP
1536:ycF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z4:7F6F15h/zIn5S1aj+cU9CEw9aINej4
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da
Files
-
f06f09b6cef55eff2550eb9831babf94beb9f57701b10a42f46e0664cc5375da.exe windows:6 windows
Headers