gh0strat | 68acfdb0eb8f4a7e1ac85842163945e256145732f40328bd6b8fd1300de7bd0e

General

Target

68acfdb0eb8f4a7e1ac85842163945e256145732f40328bd6b8fd1300de7bd0e
Size

112KB
MD5

601bb6549da74db76dd742cf4e4989ef
SHA1

ec2a91a80ec07c37a8fa8e2ecfa6c9d0375cbae4
SHA256

68acfdb0eb8f4a7e1ac85842163945e256145732f40328bd6b8fd1300de7bd0e
SHA512

34d653c4abc1a24cb7dfb0f4cd818b1115595658c1bac2dd8c8f04d2cc8441ec689aa41be46f555eae592ae9f10e80eb49e5f5e0633a5682407d765c3b97e905
SSDEEP

3072:lF6F15h/zIn5S1aj+cU9C8IhgXw9aINej:+FjhLI5SG+FM9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68acfdb0eb8f4a7e1ac85842163945e256145732f40328bd6b8fd1300de7bd0e