gh0strat | 9f9e72838af6dfc6e3858fd8f60d78e2ab35baf8b96b03830003512067cb00e5

General

Target

9f9e72838af6dfc6e3858fd8f60d78e2ab35baf8b96b03830003512067cb00e5
Size

112KB
MD5

da734cf75a4d74161655eec90ed3691b
SHA1

a76d3c8db6ace8670acce2787b20b4d23a8d5d13
SHA256

9f9e72838af6dfc6e3858fd8f60d78e2ab35baf8b96b03830003512067cb00e5
SHA512

7d4322033ff5e60f0cd9efe320d67aaa1a4937bd1744446d6c60e70c70f3e9882dd49befecd92b8a296eca7f930eb97edefc4db06e69bedbde0fe036b92f2ae7
SSDEEP

3072:bF6F15h/zIn5S1aj+cU9C8LHgxw9aINej:0FjhLI5SG+FB9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f9e72838af6dfc6e3858fd8f60d78e2ab35baf8b96b03830003512067cb00e5