gh0strat | 8b89024107e20ffea33b22efd3f6f203b57950655aea1623a21a69e911612312 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b89024107e20ffea33b22efd3f6f203b57950655aea1623a21a69e911612312
Size

606KB
MD5

77772933601e9e4fd2bbd785bbb31a9d
SHA1

6f32043ebface642632af621f2863688415f820c
SHA256

8b89024107e20ffea33b22efd3f6f203b57950655aea1623a21a69e911612312
SHA512

6b8431afc2aefe76ab3059cb7fcba17f5bc7d09aab23d23b044b2638afad014965b31579a9abf989f37843e4c1c2481ad07cc857f5305587502b4a35cfc6926d
SSDEEP

12288:ScjrLQhTeGDF1r+TStBXvWyZ4uVNedGlHRM5ELFPMd:ScjeTeGDF1r+TStBXhZPVNXJRM5EJkd

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

8b89024107e20ffea33b22efd3f6f203b57950655aea1623a21a69e911612312
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

1818tt
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE