Behavioral task
behavioral1
Sample
340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7.exe
Resource
win10v2004-20240802-en
General
-
Target
340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7
-
Size
109KB
-
MD5
215262088575984e43daabd094447470
-
SHA1
03ff77a87c9424ff84ce38635db42099109e2566
-
SHA256
340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7
-
SHA512
dfea7201ce6c945fa5f04539f147ac2e11bfb0595e5f4c9e8b1a5c61eff543a0d6b922001fdf1e1258258ef925d66b449afc35624ac8aa345dcbe5fdaa670451
-
SSDEEP
1536:DF6FQ85LFiGkSzyqzin5SP9cljcfcU9C9g5w9aINe3z5:DF6F15h/zIn5S1aj+cU9C9g5w9aINej5
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7
Files
-
340b51557b9850c9f0d047b9abfcb22ccbb97b9cb9502647872ed3a5e8ae47c7.exe windows:6 windows
Headers