General

  • Target

    811425b3070fd0b16566790d3f15fbdcdb968b004829ab9c7c678755415c2668

  • Size

    1.3MB

  • MD5

    fabdad3cd4fab2543f715eb81d62f3dd

  • SHA1

    5e7b1d0ca42dd20b6060cc02adcf22c8279c334d

  • SHA256

    811425b3070fd0b16566790d3f15fbdcdb968b004829ab9c7c678755415c2668

  • SHA512

    72beec5b157b53db9cdab41600c5e1e227ae7eccbebff4e3a9254586731c99aaf37188abac090d45ff989bdbd5914166b3048bc1f6c7201a79d210d17abe3ca3

  • SSDEEP

    24576:aDUHFNvyC6X3bQm1JHiMhYNU2VuFiWM5GrkQPXHMtR1tD1ZhtTGOaK0/k8CDyzhg:UkmC3TGVL

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Purplefox family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 811425b3070fd0b16566790d3f15fbdcdb968b004829ab9c7c678755415c2668
    .exe windows x86

    de6942886ea1706308de6a5dc748b51c


    Headers

    Imports

    Sections