Behavioral task
behavioral1
Sample
00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420.exe
Resource
win10v2004-20240802-en
General
-
Target
00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420
-
Size
109KB
-
MD5
ced12e571cecb3799c10b9d80ea489a8
-
SHA1
78daab96fe5ad39713644f76dc8f10041b2da87a
-
SHA256
00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420
-
SHA512
25ce1b582e79c28c74cc073a2613e95a6615ab4f2f505b5da4156b6a71a16fdc915a824ae4074af2f0c9c4f45729a3ad0a5124d53801b44ec918cd2c64d0f454
-
SSDEEP
1536:Tf1F6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zm:Tf1F6F15h/zIn5S1aj+cU9CEw9aINejm
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420
Files
-
00db5f3d362d61b232a55a252c1c84941d9d76ae743fc81f0eb3c5e324737420.exe windows:6 windows
Headers