Behavioral task
behavioral1
Sample
795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683.exe
Resource
win10v2004-20240802-en
General
-
Target
795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683
-
Size
109KB
-
MD5
75503ba40561fcb1a4dba151024ab0e2
-
SHA1
4743ce33c4419aec744548e66ac4f4f6a7d0ea92
-
SHA256
795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683
-
SHA512
52d44676f9d118c06d346a1e922ce6632102fb2f2e7313c37729712b9d1f5105d78fe261353025d48b759f54c9d02d886d0b59e3ccc14837d974168f58fb4a63
-
SSDEEP
1536:UF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zl:UF6F15h/zIn5S1aj+cU9CEw9aINejl
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683
Files
-
795889056b6821d7d4e1572e7283415a5d469f460454d3539975b10f4104f683.exe windows:6 windows
Headers