gh0strat | 4c7f16f09cd0e47fe704649f36f434f8f7882a0ee7e2a540791f99d3707ed40a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7f16f09cd0e47fe704649f36f434f8f7882a0ee7e2a540791f99d3707ed40a
Size

698KB
MD5

f3c1a0824e747fc26f117074c1621401
SHA1

af5016d0760fa3e3c67b623cacbf42e7fb75d3de
SHA256

4c7f16f09cd0e47fe704649f36f434f8f7882a0ee7e2a540791f99d3707ed40a
SHA512

26b53601cbafb61cf77c02ffcb0b3a6e78f0e1b2dde3b599b6d07983e78fa0bf58ace6f214589d1e10d5dca9ae1307d8da376d1474bfae4c8994f90e856f965d
SSDEEP

12288:icjrLQhTeGDF1r+TStBXvWyZ4uVNedGlHYM5GMFzNYtkeLFPMdAj8yE4:icjeTeGDF1r+TStBXhZPVNXJYM5G+h4n

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

4c7f16f09cd0e47fe704649f36f434f8f7882a0ee7e2a540791f99d3707ed40a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��е۹�
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE