gh0strat | 1a011da6f9225f2086b4f98a302e5418[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a011da6f9225f2086b4f98a302e5418.exe
Size

204KB
MD5

1a011da6f9225f2086b4f98a302e5418
SHA1

130b1d903d83c43c8e298fdba9f47c3a8855edf5
SHA256

e0a4c836e9021c0aa838a1ea8150575b6bd465648df188e3966ae7f5e3e2f1b0
SHA512

71fb57bcb4a79763d9e63b6cfa03aef67b4e90f06d1dfdce7518a3a048fa475c8268c34af5947ccf9897721df2f5affa5e8fc38bd6cf9f530d2314a9856a6835
SSDEEP

3072:XhwVMQgpRh5qTsnyTDW2DQ80K7dPLjCNRwQR0ttTHXf:62Rnh5Esym2E87RCYQR0jXf

Score

10^/10

gh0strat

Malware Config

Signatures

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Gh0strat family
gh0strat

Files

1a011da6f9225f2086b4f98a302e5418.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ