Behavioral task
behavioral1
Sample
9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36.exe
Resource
win10v2004-20240802-en
General
-
Target
9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36
-
Size
109KB
-
MD5
9a1a91636d24bce53a1240abfcbfcd29
-
SHA1
072a83450178898fec9b00b99cc251d58e1be621
-
SHA256
9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36
-
SHA512
6691354000c3564407085303b65e5be1e266ce530ee86da39a7b590b6ca81933aad90fc8092a61c9d7458d00c1a44a62c79d0151eaceddfef1d8b2849cb20c06
-
SSDEEP
3072:AF6F15h/zIn5S1aj+cU9C8BgGw9aINejg:fFjhLI5SG+F89aIA8
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36
Files
-
9b664413803d53e8e6c38892ff97cf9f364171d5876e27ff96176c571187ea36.exe windows:6 windows
Headers