Behavioral task
behavioral1
Sample
05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb.exe
Resource
win10v2004-20240802-en
General
-
Target
05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb
-
Size
109KB
-
MD5
58be027d3073527b88523065ca67a549
-
SHA1
04e34e0b2052fa94636b8b03ce6254739a24210b
-
SHA256
05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb
-
SHA512
fd9768fabfb4054d83c1f9f8845ba345428031da859b0f882df95c3a1af5c532e70d022d8db61541b209ddb0d6fc56ae67d7156d30e7d42608aa591dc5099a7a
-
SSDEEP
1536:kGF6FQ85LFiGkSzyqzin5SP9cljcfcU9C+g5w9aINe3z5c:LF6F15h/zIn5S1aj+cU9C+g5w9aINeja
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb
Files
-
05a96d1ec7eef89ba789bb4a51a052af6053bc81f1ac0cedccb9b4f79a392cdb.exe windows:6 windows
Headers