Overview

overview

10

Static

static

10

20c96c1209...1c.exe

windows7-x64

3

20c96c1209...1c.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    20c96c12097a5d7fb3a857b30745b81227c5a2926ce29fda79cf5859657be81c

  • Size

    1.3MB

  • MD5

    d160dccf510f5ddcbe84d265e0f8a582

  • SHA1

    890cb1dc041e63d9c05f60668cd99603ba37be02

  • SHA256

    20c96c12097a5d7fb3a857b30745b81227c5a2926ce29fda79cf5859657be81c

  • SHA512

    3f32dce773162eb9c4fc7eaf2e06cd7ec21960f58195f242df4a7493f682a5d3e148670d235966f3a3af05114221ba1d1018e17beb0a4b9e0ca0e2b99056d57e

  • SSDEEP

    24576:hDUHFNvyC6X3bQm1JHiMhYNU2VuFiWM5GrkQPXHMtR1tD1ZhtTGOaK0/k8D:3kmC3TGVL

Score
10/10
rootkitgh0stratpurplefox

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

    rootkit
  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Purplefox family
    purplefox
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20c96c12097a5d7fb3a857b30745b81227c5a2926ce29fda79cf5859657be81c
    .exe windows x86

    de6942886ea1706308de6a5dc748b51c


    Headers

    Imports

    Sections