Behavioral task
behavioral1
Sample
0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787.exe
Resource
win10v2004-20240802-en
General
-
Target
0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787
-
Size
109KB
-
MD5
1b5d3e43e9bdffb106dbc2ed4411ac74
-
SHA1
3a09ec6cea7e304a22c17547ed85e7bb0ed5b89d
-
SHA256
0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787
-
SHA512
c3f1948b3f1ab7870baae64171cc270f19fdaf1770854cdb137ebbcc2e28d7bf5fd4f610c116ad74c0a7d240c5dd1f9377c78ab1ac1ec7193eed1fd009148314
-
SSDEEP
1536:bF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zS:bF6F15h/zIn5S1aj+cU9CEw9aINejS
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787
Files
-
0053c59388f0c967ecde34bcbb8d4507849a16a434af3c0022df3af1a0fe9787.exe windows:6 windows
Headers