gh0strat | 1bf3b7a31837c184aec989a1b8149ada33304d72b0bae6693191a0cc5b95188a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bf3b7a31837c184aec989a1b8149ada33304d72b0bae6693191a0cc5b95188a
Size

698KB
MD5

f24ee0f71bb53c8e244b46e23abb0370
SHA1

a205d7641c64de76ba59e27d862a1c3d64f83611
SHA256

1bf3b7a31837c184aec989a1b8149ada33304d72b0bae6693191a0cc5b95188a
SHA512

a31263c84b056d1502454cd5fc8155a226df629bb4c6b97e0cf4b2214854ed77aea082bd98cda5d0c57cf89a053f9b87dcbe1ccb86af89d20744f4fcebf61622
SSDEEP

12288:icjrLQhTeGDF1r+TStBXvWyZ4uVNedGlHYM5GMFzNYtkeLFPMdAj8yEY:icjeTeGDF1r+TStBXhZPVNXJYM5G+h4H

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

1bf3b7a31837c184aec989a1b8149ada33304d72b0bae6693191a0cc5b95188a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��е۹�
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE