General

  • Target

    d94a4d89af56638ee54989d1dbfa3491ae6ea9093c35d2e08bc983ea41547b41

  • Size

    476KB

  • MD5

    eabef227dba9d70be6e4bfea15096be5

  • SHA1

    e6d456c98f44c5a84ac2fc7143b0ad950198fe2f

  • SHA256

    d94a4d89af56638ee54989d1dbfa3491ae6ea9093c35d2e08bc983ea41547b41

  • SHA512

    8a28c6ae198c954e04dedba4216b2d031458299fb4f6af4860d5dfd518eec5b31bb328ef985f63aae31c0cdab0ff84b909b9ac3c4f28c0d6143b5de4079395e0

  • SSDEEP

    3072:oYCK/yLrQbWaR5Qax8cRYeqaYQBK21F1Vxqjvh5Q1TuhctQkhQR:ZyLEbWaR5CcSva7BKqrVuvh5QieQk

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d94a4d89af56638ee54989d1dbfa3491ae6ea9093c35d2e08bc983ea41547b41
    .exe windows x86

    032ac126bef9dc99c70a99a6b91b16f2


    Headers

    Imports

    Sections