General

  • Target

    a703e9da12b5783f9dc060ac2a6dc7c22f9976d76438d69bbe68e36b526a1020

  • Size

    10.1MB

  • MD5

    644e9cb3ff7abb50d0771cba7376ba17

  • SHA1

    b0c61302606e403c2e709eb500fd3edd1b548531

  • SHA256

    a703e9da12b5783f9dc060ac2a6dc7c22f9976d76438d69bbe68e36b526a1020

  • SHA512

    aa480604e0db3e1b0b058970f31c8a32d0ce99606fb77a9a55dd6360a5a1c57045d9fd88b4751c90fb6be510ebef52f39c314c8a8d7cdef40b98ffd32a5a12bf

  • SSDEEP

    1536:xOwZtljUodOsVhowc5jiYKT7RumGYY8ScN32vhMP4zIlwp:xxLOK5cx1KZuVYIcIvhMcWi

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a703e9da12b5783f9dc060ac2a6dc7c22f9976d76438d69bbe68e36b526a1020
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections