gh0strat | 48082175bbdc254b0ed843c99c60799a3c54d8567ead54166319c1d6ed4c5d55

General

Target

48082175bbdc254b0ed843c99c60799a3c54d8567ead54166319c1d6ed4c5d55
Size

112KB
MD5

192376ab58c6843904aea4d558aa0284
SHA1

e2eae214345cca1e68647652eb754b883bfa23b5
SHA256

48082175bbdc254b0ed843c99c60799a3c54d8567ead54166319c1d6ed4c5d55
SHA512

974e2efb66482f0fab51fe4ff59dc242db85f313553b4d4a7e987be81288b38ce0dcba7ee9362b614f9fb5272b04f5b759f6fa5365c61e6ebf25ee764cb674a9
SSDEEP

3072:7F6F15h/zIn5S1aj+cU9C8mlgRw9aINej:UFjhLI5SG+FA9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48082175bbdc254b0ed843c99c60799a3c54d8567ead54166319c1d6ed4c5d55