General

  • Target

    c3cf38b1ab59a8b7063ff08ddc2c7e0242aa9f44fd37ab73ff1a9ae31c23e0f8

  • Size

    476KB

  • MD5

    1c167f3a63f5f9ea0e461037fb0c213d

  • SHA1

    9f342954ce767265ded56bdfa93e1ca6e6dba6f1

  • SHA256

    c3cf38b1ab59a8b7063ff08ddc2c7e0242aa9f44fd37ab73ff1a9ae31c23e0f8

  • SHA512

    0dc2d822b3f9b182cb7263378f535c02f32e58506fff6391da03c49f68ea183f7409e55a56aac000494ebd2f9b6ef8e98388f0dea4248a5008b2eb08f325f513

  • SSDEEP

    3072:oYCK/yLrQbWaR5Qax8cGYeqaYQBK21F1Vxqjvh5QT0uhctQkhQR:ZyLEbWaR5Ccfva7BKqrVuvh5QXeQk

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3cf38b1ab59a8b7063ff08ddc2c7e0242aa9f44fd37ab73ff1a9ae31c23e0f8
    .exe windows x86

    032ac126bef9dc99c70a99a6b91b16f2


    Headers

    Imports

    Sections