Behavioral task
behavioral1
Sample
f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60.exe
Resource
win10v2004-20240802-en
General
-
Target
f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60
-
Size
109KB
-
MD5
c85c9f39a1da07313325048f73898280
-
SHA1
1ceac3141f83b5932fafd79cbb484312636fa7bf
-
SHA256
f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60
-
SHA512
7ce899b6508d47e9b183af7fb71fd144631ccf6a7f7a0c335db294300a456400a939c03b75e7b00716f44f079db9b37869816c9c55a3c23230b157adc0a30449
-
SSDEEP
1536:jF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zB:jF6F15h/zIn5S1aj+cU9CEw9aINejB
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60
Files
-
f72cf39b2ba36b5f2d1cadaf45a999bc43bd365d2ccf005b5a02b7ba42401d60.exe windows:6 windows
Headers