gh0strat | fda6aa4d9ac965c78a1f9976012df9d0d51b85fe190edf7ce5ff0997fec1279e

General

Target

fda6aa4d9ac965c78a1f9976012df9d0d51b85fe190edf7ce5ff0997fec1279e
Size

112KB
MD5

5bac34bee9db6eb1c9e26e5d60d8ce20
SHA1

3df37de167a0b8617303958aa2d291920909b299
SHA256

fda6aa4d9ac965c78a1f9976012df9d0d51b85fe190edf7ce5ff0997fec1279e
SHA512

eb11fd325ba55f70734c93cda7867c74bb11dba4d1e76ee373312a4f7867305c6d0750933573fb042ca81d815a9e318700d98cb518ce4ae15393f757c9e3fd7f
SSDEEP

3072:iF6F15h/zIn5S1aj+cU9C8V2guw9aINej:5FjhLI5SG+F39aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda6aa4d9ac965c78a1f9976012df9d0d51b85fe190edf7ce5ff0997fec1279e