gh0strat | 7cc848207623bd2e60a67fda7dcc15c7b578ff288c31a96187467e596d1afcc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cc848207623bd2e60a67fda7dcc15c7b578ff288c31a96187467e596d1afcc2
Size

304KB
MD5

83f78e3b1fdceac03db6ec7271b97c80
SHA1

f7be8d6a2d5b6024f228cfd8079c361817660cef
SHA256

7cc848207623bd2e60a67fda7dcc15c7b578ff288c31a96187467e596d1afcc2
SHA512

e95bb1b8411695b2f1736a803d44ee939d98bec4d11e8c456035b5933de1d2fc1a356ff69ef5c4296fc9b57b0c133ba4870acbc85e707bce33afe515fe57a1f6
SSDEEP

6144:LiTtixB0mL7t0J5pp34i5bI4G7v4G7AWFlt:28B0md0rpNZtqJAUt

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

7cc848207623bd2e60a67fda7dcc15c7b578ff288c31a96187467e596d1afcc2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE