Behavioral task
behavioral1
Sample
cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00.exe
Resource
win10v2004-20241007-en
General
-
Target
cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00
-
Size
109KB
-
MD5
59e6e0376252fb5e73383871de653179
-
SHA1
f12a88b8b51b1d3b88ec144b2d0b991d5a19ee63
-
SHA256
cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00
-
SHA512
f2c1d5532b064c0b50ad9bd8ab894774a33243f73bd4e0a449f386a6a382be3bdbf1430b2e30341d11dbf3d4b2fe0922455cc1e55e839d61f0807ef1d06228a7
-
SSDEEP
1536:JF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z0:JF6F15h/zIn5S1aj+cU9CEw9aINej0
Malware Config
Signatures
-
Gh0st RAT payload 1 IoCs
resource yara_rule sample family_gh0strat -
Gh0strat family
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00
Files
-
cc4c5fe898092b5b90bdada916256d2b33bab663f6e2760047beca488ad9ec00.exe windows:6 windows
Headers