Behavioral task
behavioral1
Sample
6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988.exe
Resource
win10v2004-20240802-en
General
-
Target
6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988
-
Size
109KB
-
MD5
67526b76fff35e4f6849b8b8ff32ae3e
-
SHA1
e6f1b3f113b1988a7d158d61f89cac5257058aee
-
SHA256
6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988
-
SHA512
6701788f365fb40f6fa85a0b26f07822fe3224fcb2e191196d80f8e14fcb8b81a669d420f161c4a29df0194ae4963997ad8039dac47e5d107f3f1c1761cad7b4
-
SSDEEP
1536:gF6FQ85LFiGkSzyqzin5SP9cljcfcU9C8vxw9aINe3zL:gF6F15h/zIn5S1aj+cU9C8vxw9aINejL
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988
Files
-
6eef9e9015d1556419c84ac837f9245cae40bdd15cba1e0f7b83a08056b9f988.exe windows:6 windows
Headers