Behavioral task
behavioral1
Sample
f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738.exe
Resource
win10v2004-20241007-en
General
-
Target
f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738
-
Size
109KB
-
MD5
614d03db035b3ca5687ba3f5e0c38b5f
-
SHA1
7c5d4effee4d429e6a0ed6713449b6e1f172e97f
-
SHA256
f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738
-
SHA512
0092a47a4c224462ca156ead0026c30a3a6680e89c2dc01af6894015a6807638f3f8ec10544c77f52725b59b706c909b0117b30406da7d3ca97960678cf034d3
-
SSDEEP
3072:aF6F15h/zIn5S1aj+cU9C8AgGw9aINejs:BFjhLI5SG+Fv9aIA4
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738
Files
-
f2f17cee6c5969ab89bcd3b8dcfda03a7914b0d7729c8578e2e31f1602573738.exe windows:6 windows
Headers