gh0strat | a4768b8c131fbb4ba9159507e65157416b81f5a6bbefda5029c2f738c2773e2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4768b8c131fbb4ba9159507e65157416b81f5a6bbefda5029c2f738c2773e2c
Size

369KB
MD5

ac55c5118ef0d3fa3a24c6f6c0a8cf05
SHA1

e681b1fb5b6bc4980a74054d35e101b564082b52
SHA256

a4768b8c131fbb4ba9159507e65157416b81f5a6bbefda5029c2f738c2773e2c
SHA512

743c6de27f52707325efc7ccf34026611356aef7761503c86332cb34b3afd11464c9394245b4459dd2d756001919f8554bf016b63508a2eaec9573e52e5d6fcc
SSDEEP

6144:YsIt6nW8QXBTyPRqyhYPbHcTBlhHrhndnkv0sKoGJ6mWKbIL8SGzYJeMNEr:99W8FJq8YPbHcT3ANK7RWKcUqeMNK

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

a4768b8c131fbb4ba9159507e65157416b81f5a6bbefda5029c2f738c2773e2c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata2
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE