General

  • Target

    a744947346bcc15a77db6fbbd81479e3e3253875c2f6d874861c2b84c8c43b5a

  • Size

    84KB

  • MD5

    199f9a922d6e53f7ee486125208c0175

  • SHA1

    e9a78c48a1e95179bf308a4c4971222df3beee9a

  • SHA256

    a744947346bcc15a77db6fbbd81479e3e3253875c2f6d874861c2b84c8c43b5a

  • SHA512

    efdbc222adb9d994022b48b5968cda5d3c4f63470288d061a75ac744574cd94b2711eb1a2e837d8e8b37bc14b6562e8b7fc5a6624008644432ab44d45e291655

  • SSDEEP

    1536:YTsenhY8kwtuwL7hSm1Rh+wIOdnToIfAUfeDtGHE:UsEY8mwnhS1mVTBfAUffHE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

127.0.0.1

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a744947346bcc15a77db6fbbd81479e3e3253875c2f6d874861c2b84c8c43b5a
    .dll windows:4 windows x86

    2221c0107b5e2205969c1e2018e65d34


    Headers

    Imports

    Exports

    Sections