Behavioral task
behavioral1
Sample
04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4N.exe
Resource
win10v2004-20240910-en
General
-
Target
04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4N
-
Size
109KB
-
MD5
7314a0d3b8276b61892bfa2debae4df0
-
SHA1
67a1521cc1602d397d4b7d6beb3dc1399427fcd4
-
SHA256
04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4
-
SHA512
fd74f889420b58b4e4dba1de04eb12a1d713911fa6daa8c836eb5042a9e3bf25c576c7b677f8028add204c7b78322d78d28a9c6c4d4216dce086fb5815becf72
-
SSDEEP
3072:8F6F15h/zIn5S1aj+cU9C8ngGw9aINejV:TFjhLI5SG+Fu9aIAh
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4N
Files
-
04d3ba8ba7efbb06f881970bd3be3134db3f77eca79e14d2e52e420df443c8c4N.exe windows:6 windows
Headers