gh0strat | e6debb43dadc3e7ae86bfe3d63fb9fb803ae027d33f1b8390cd75f7f199ed809

General

Target

e6debb43dadc3e7ae86bfe3d63fb9fb803ae027d33f1b8390cd75f7f199ed809
Size

112KB
MD5

bcd74e62fa1b06125268c9931d5c7659
SHA1

58df0e3bb12c04ddcbde821e1074aa54a4b3837d
SHA256

e6debb43dadc3e7ae86bfe3d63fb9fb803ae027d33f1b8390cd75f7f199ed809
SHA512

533af3112b8c9b330fcbdf9987e69ebb2a40a514c3c789f594723b72d5fb2a827195ccfb61d1ed6f8712b9b667cb3a5b9747751d4c3f6db59bd465d41a83e618
SSDEEP

3072:AF6F15h/zIn5S1aj+cU9C8mWgAw9aINej:fFjhLI5SG+FE9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6debb43dadc3e7ae86bfe3d63fb9fb803ae027d33f1b8390cd75f7f199ed809