gh0strat | 19ab217e72015db2c46d6a2e620eef9ade067e4326eb1264921844ef0ec85d1d

General

Target

19ab217e72015db2c46d6a2e620eef9ade067e4326eb1264921844ef0ec85d1d
Size

112KB
MD5

b2fe710fe26f69e94a5bfcb972cf8bc4
SHA1

85dc0d588267ceb605ce91999ec2e9edb6ff0e75
SHA256

19ab217e72015db2c46d6a2e620eef9ade067e4326eb1264921844ef0ec85d1d
SHA512

288f70167cde5f141f00998f0b414910c4e24d23437bf0976eb074aa67ca91b5ebbbafd273dc18f46285e15f2ea53b4d3c657b2260e423c42262c0acaa923289
SSDEEP

3072:hF6F15h/zIn5S1aj+cU9C8Dtgbw9aINej:CFjhLI5SG+Fx9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ab217e72015db2c46d6a2e620eef9ade067e4326eb1264921844ef0ec85d1d