gh0strat | 4e2141fa824575f1e267f9d48fded8a417df441b76fc06fd43cccd52494b2266 | Triage

Sharing

General

Target

4e2141fa824575f1e267f9d48fded8a417df441b76fc06fd43cccd52494b2266
Size

148KB
MD5

69481ae017b875ff0dfc23c14b79dd52
SHA1

6f2883628216251ee76e5dc0b5eb4b30b5898fe5
SHA256

4e2141fa824575f1e267f9d48fded8a417df441b76fc06fd43cccd52494b2266
SHA512

c4698ffed6a8c54bd82031cff5645ca94e302d4724877eb09abf772beca1902ac0fb4871260cd891347933ba87381f9052599f075a946c0019bbf9fd1b0a853c
SSDEEP

3072:gG9v4j6nEWg/5y147XxZ2WRDiPx3TBft82IKHtJl:ggvwXH/g1G7hiPx3TBl82IKHtJ

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

4e2141fa824575f1e267f9d48fded8a417df441b76fc06fd43cccd52494b2266
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

FreeTest

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ