General

  • Target

    f5d6e14b51e522e1bb88611387b02501f1baa23d8d7d458f7c22c9dc393e1d85

  • Size

    51KB

  • MD5

    1ba1446efe9eb99676971ae9f98c3240

  • SHA1

    afdcb77fb3d98fab7aa7fa02de7a0ca85a23dc14

  • SHA256

    f5d6e14b51e522e1bb88611387b02501f1baa23d8d7d458f7c22c9dc393e1d85

  • SHA512

    4b31e65282e8f3b3e06c6bd6df32a10cd6b256294a20d7efa48ddba31bba779804c4d474407fefe2a771958aecf46d8a95bfddafb2d0aae532177eb67d4c5b12

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fboZJYH5

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f5d6e14b51e522e1bb88611387b02501f1baa23d8d7d458f7c22c9dc393e1d85
    .dll windows x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections