gh0strat | c1d90831df3ebc5b6310c5e59828b619729c63f9d9d3f0e3ac39035192fa2de3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1d90831df3ebc5b6310c5e59828b619729c63f9d9d3f0e3ac39035192fa2de3
Size

144KB
MD5

11b6702491791f6e85863d0734828c30
SHA1

11d20ffb190639eac22a487664ce75df46d15b7c
SHA256

c1d90831df3ebc5b6310c5e59828b619729c63f9d9d3f0e3ac39035192fa2de3
SHA512

49f32edf565745d93778f514707c5473d25980245525792bcfc063ac4c354e221b3fcc9bb794f535cf1e0bdfe5d8bbfb0bb48bfaca6b55e0118cb8eb6772e9b7
SSDEEP

3072:SYL264fsqBAw5tkcPHQj0YASjb+yw1BMWLp6yxi:ZWjp9YASg1WM6yx

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

c1d90831df3ebc5b6310c5e59828b619729c63f9d9d3f0e3ac39035192fa2de3
.exe windows x86

572009bfe17cd6279c868a690587361a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ