Behavioral task
behavioral1
Sample
3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391.exe
Resource
win10v2004-20240802-en
General
-
Target
3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391
-
Size
109KB
-
MD5
a20fbc84e8571da84243aad45ad2fb9a
-
SHA1
84a0357ce2c8037e3b55d484af3e0bf520fa0114
-
SHA256
3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391
-
SHA512
e6998f8f0dd2fa251c95a7f174f7e33601004f335259ef00dad44413a182b9f93b5ac5a0380238b5df730db39aeb9d012ec773223a36f58f7b7b198d0ca9d3ab
-
SSDEEP
1536:WF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zD:WF6F15h/zIn5S1aj+cU9CEw9aINejD
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391
Files
-
3940536c0a56f78dc3b7c7ffa17f2b8a050f4d6d284c9d40a713fad1f6aa8391.exe windows:6 windows
Headers