General

  • Target

    ea6e15a493165be97b3ab593f23252064c95a08f4c28628baeb846b9e137011c

  • Size

    196KB

  • MD5

    b0ffaad9e36afae24370f210700a7368

  • SHA1

    a18754264614cb1bfa16b2a86000dbbb305129e1

  • SHA256

    ea6e15a493165be97b3ab593f23252064c95a08f4c28628baeb846b9e137011c

  • SHA512

    b96a2342c092ede46b5966b646b7c05c96d27b129c4c14004bae804cbb68a87fd19051eb608dcd820f0b26ee8ff745596458c52fc2f84567c8167f0871730563

  • SSDEEP

    3072:HHjaFrhw9++pM/kkfel0ns73dBrPRgQyWoVHSJNqc/mrAy7XwkqYC8VGkUDCk/fU:HHUhw4+C5R8+QOVHSJEcA7FqV8VG3j1

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • ea6e15a493165be97b3ab593f23252064c95a08f4c28628baeb846b9e137011c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections