Behavioral task
behavioral1
Sample
eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d.exe
Resource
win10v2004-20240802-en
General
-
Target
eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d
-
Size
109KB
-
MD5
99f98a732b0b4dc96eab20a9b2f35b84
-
SHA1
209a64ae9c91175846123e0a2b5c263ff2614a19
-
SHA256
eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d
-
SHA512
4d393ea8f2d9ddb4089598da3313ea0a6c0c93c19cb87c593663a8a89f028db08868fe7bd9fe87217d7c87298060103fbb071acf31dfb03cb62ce1795b66934c
-
SSDEEP
1536:5F6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zR:5F6F15h/zIn5S1aj+cU9CEw9aINejR
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d
Files
-
eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d.exe windows:6 windows
Headers