gh0strat | 7d98ade41b0e28daae9104eb6d92d85beb4c51f913c03847d63674190fc046eb

General

Target

7d98ade41b0e28daae9104eb6d92d85beb4c51f913c03847d63674190fc046eb
Size

112KB
MD5

f6a7a33c60420bff1a6585b622be47ea
SHA1

6a596a4ec2963fa771d2db29b9da25d1f6237b75
SHA256

7d98ade41b0e28daae9104eb6d92d85beb4c51f913c03847d63674190fc046eb
SHA512

489473f76e70b60462de9cd0d0294df077dc60fb72f72452dbfaf28af9a33fb87b0cd7659551975f96cddb5507712ed730bdfd1ac6b5b2b5d7550607d34267a1
SSDEEP

3072:lF6F15h/zIn5S1aj+cU9C8VZgXw9aINej:+FjhLI5SG+F79aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d98ade41b0e28daae9104eb6d92d85beb4c51f913c03847d63674190fc046eb