gh0strat | 1911ac4f760f682bb4258be5986cb76b53b8b5c28abd671faa35e67eefa9ca16

General

Target

1911ac4f760f682bb4258be5986cb76b53b8b5c28abd671faa35e67eefa9ca16
Size

112KB
MD5

f4b88534ef0462d739600b6aa4468ecd
SHA1

bf9399f3905b9780fc649cc3ed95917fb609ae00
SHA256

1911ac4f760f682bb4258be5986cb76b53b8b5c28abd671faa35e67eefa9ca16
SHA512

4614c9cc6ecef28dce44e33a2e65a465e2d4c39794381013aa5c0c7f8197b1afd260936066abbb4dc87444dad610c64172b363cc3860a28857e0a71d1c2d8078
SSDEEP

3072:DF6F15h/zIn5S1aj+cU9C8d1gJw9aINej:MFjhLI5SG+FJ9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1911ac4f760f682bb4258be5986cb76b53b8b5c28abd671faa35e67eefa9ca16

1911ac4f760f682bb4258be5986cb76b53b8b5c28abd671faa35e67eefa9ca16
.exe windows:6 windows

Headers