Overview

overview

10

Static

static

10

蘑菇远�...er.exe

windows7-x64

10

蘑菇远�...er.exe

windows10-2004-x64

10

蘑菇远�...er.exe

windows7-x64

8

蘑菇远�...er.exe

windows10-2004-x64

8

蘑菇远�...��.url

windows7-x64

1

蘑菇远�...��.url

windows10-2004-x64

1

蘑菇远�...��.url

windows7-x64

1

蘑菇远�...��.url

windows10-2004-x64

1

蘑菇远�...��.url

windows7-x64

1

蘑菇远�...��.url

windows10-2004-x64

1

蘑菇远�...��.url

windows7-x64

1

蘑菇远�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c287edb86f3e738c56161f4e496a271c5b4d52c388bdcaa737535a63cc2a913c

  • Size

    376KB

  • MD5

    63874a70adf4a66aa7a15997577245be

  • SHA1

    54f9d8ea24bd00c6a9c09ac2447b554e15078081

  • SHA256

    c287edb86f3e738c56161f4e496a271c5b4d52c388bdcaa737535a63cc2a913c

  • SHA512

    4950ee87260b45d0a11c2f8b13d105bf951ee73b1ba9f794b56c72783606706d2b3228dc898eef3d579caa354d7d8d8bbaf6987c493349834fe5fce2cd605acc

  • SSDEEP

    6144:CCgkl2aYWWGmXhW/3PZp5YVWghwdYr15aO5QFVRtQ025blPUYzL5:CWjmXcvxHacYr153aDPSb9UWL5

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • c287edb86f3e738c56161f4e496a271c5b4d52c388bdcaa737535a63cc2a913c
    .rar
  • 蘑菇远控1.1版/dat/dooker.dat
    .exe windows x86

    95efb7e3426435f50c7a77cdef7f09a1


    Headers

    Imports

    Sections

  • 蘑菇远控1.1版/dooker.exe
    .exe windows x86


    Headers

    Sections

  • 蘑菇远控1.1版/dooker.ini
  • 蘑菇远控1.1版/加入VIP,轻松学黑客技术.url
    .url
  • 蘑菇远控1.1版/动画软件投稿说明.url
    .url
  • 蘑菇远控1.1版/圣剑网络律师声明.txt
  • 蘑菇远控1.1版/圣剑网络技术论坛.url
    .url
  • 蘑菇远控1.1版/圣剑黑客同盟.reg
  • 蘑菇远控1.1版/圣剑黑客同盟.txt
  • 蘑菇远控1.1版/圣剑黑客同盟.url
    .url
  • 蘑菇远控1.1版/未命名.jpg
    .jpg
  • 蘑菇远控1.1版/桌面.jpg
    .jpg
  • 蘑菇远控1.1版/说明.txt