Behavioral task
behavioral1
Sample
d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb.exe
Resource
win10v2004-20240910-en
General
-
Target
d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb
-
Size
109KB
-
MD5
07f7a55808b14b8de6b7f35ed21b5d80
-
SHA1
fa562ea4ff97576f69cf24b566332decd6d121e3
-
SHA256
d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb
-
SHA512
9e3d5a72af88ecd0972344d044f3b822f2479d7b63c9411b9bb47c12fc4a8af051233cadfb1cb77cdf64ed74592ada857f2018aaf5f30c59e4ec10f33a6433e9
-
SSDEEP
3072:wF6F15h/zIn5S1aj+cU9C8Eg5w9aINej5:PFjhLI5SG+FI9aIAd
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb
Files
-
d91a1571a0ac12e02b5bfd8c12486663652e23999c34b8a3b83dd47a86cfe0eb.exe windows:6 windows
Headers