Behavioral task
behavioral1
Sample
1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8.exe
Resource
win10v2004-20241007-en
General
-
Target
1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8
-
Size
109KB
-
MD5
4e8319930742e6d6d98f8ef8e647eab7
-
SHA1
bdf83d5475abe74952c71a04b913605af51d7c53
-
SHA256
1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8
-
SHA512
f20a0c19e87c00cc857fccb5bd99be520d03b64b93eb1d0e7c651d7e9a5cdc5aafdb015796382160a4375f327408730b32133d480623e6f3125d41024bb0c939
-
SSDEEP
1536:ZF6FQ85LFiGkSzyqzin5SP9cljcfcU9Clg5w9aINe3zs:ZF6F15h/zIn5S1aj+cU9Clg5w9aINejs
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8
Files
-
1e9761cc1dfda1b4495a7a3817003f733d070ab2522e31084868223c575846a8.exe windows:6 windows
Headers