General

  • Target

    b8ade23fb915a6a9305d372d07040a32d0f068d113edea32b743fa6602090e14

  • Size

    1.3MB

  • MD5

    a2f20369a4f96cfd400b6ffa5ffbf105

  • SHA1

    beff0cd271f5a1f8aea947b4b75bdab4a35fc431

  • SHA256

    b8ade23fb915a6a9305d372d07040a32d0f068d113edea32b743fa6602090e14

  • SHA512

    d4b56b72743ee3ab0891cbdea5d8a3c7166d471d8b8dea921bb019eeb289b7bfcd99c0441477971caf5c3b31e1b457ecd044247db92115828f3d5e1a96c9cbda

  • SSDEEP

    24576:RDUHFNvyC6X3bQm1JHiMhYNU2VuFiWM5GrkQPXHMtR1tD1ZhtTGOaK0/k8j:HkmC3TGVL

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Purplefox family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8ade23fb915a6a9305d372d07040a32d0f068d113edea32b743fa6602090e14
    .exe windows x86

    de6942886ea1706308de6a5dc748b51c


    Headers

    Imports

    Sections