gh0strat | f7145efe719cb886356aecdaba5d9267a25043664f2801f998299a148d847ba6

General

Target

f7145efe719cb886356aecdaba5d9267a25043664f2801f998299a148d847ba6
Size

1.7MB
MD5

67c565ab2b4385d027701f13497b5774
SHA1

18c84bfafb3be5513a55f3997a34efe0a3b7084f
SHA256

f7145efe719cb886356aecdaba5d9267a25043664f2801f998299a148d847ba6
SHA512

81e891ca8eb3031b9b93ffbd92629e845c72c5933988b7f3643172b3961ebb81cea6b4f18ab1333c1358509b926890431fa5d8ef9f15034cb1f3c4e9fd276e29
SSDEEP

24576:UST4JGXNdG0TLCEW0AASaUXAVigfdUsyfbmpSM5VY5hAuSMtRc6IyLE8K0v:0wLCEW0AASnXP

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7145efe719cb886356aecdaba5d9267a25043664f2801f998299a148d847ba6