gh0strat | 08465babbb30c63ea063cfd4706c57af165bce4cd666f313d11bf76ef9a92fe6

General

Target

08465babbb30c63ea063cfd4706c57af165bce4cd666f313d11bf76ef9a92fe6
Size

112KB
MD5

62e51fff4e041504eefe7d5ef70782be
SHA1

e614d49ef27d5d034b0eeca63198d2ae2935eea6
SHA256

08465babbb30c63ea063cfd4706c57af165bce4cd666f313d11bf76ef9a92fe6
SHA512

af00105b490a9f3efb0d9d04b5e321dfee28a440c0c2baac5da5f35ab22c5c7825103e312fa5bdc366dd4c4260bf27b0345eb1fe50015f12971be773d5e8c78b
SSDEEP

3072:cF6F15h/zIn5S1aj+cU9C8V8g0w9aINej:zFjhLI5SG+Fn9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08465babbb30c63ea063cfd4706c57af165bce4cd666f313d11bf76ef9a92fe6