Behavioral task
behavioral1
Sample
c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882N.exe
Resource
win10v2004-20240802-en
General
-
Target
c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882N
-
Size
109KB
-
MD5
549e4278325ee60f6e19946281c0e630
-
SHA1
0e40c2403e9ae56fa928fdf8aedeaffe2193688c
-
SHA256
c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882
-
SHA512
39fa5d90e57081e4d88cf9e8b4568badf5db4ec84a604f52e85fdee5e4cce5069493f6c2727c2117a47327405c688cd5df5863369acde7815e187147c976384e
-
SSDEEP
3072:mF6F15h/zIn5S1aj+cU9C87gGw9aINejz:1FjhLI5SG+FW9aIAX
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882N
Files
-
c5f524ec2cb33455af5a64c8a0e9c592801b5f382758cf00a13bc90e0d01a882N.exe windows:6 windows
Headers