gh0strat | 00daf04ae750c36577eacf65e92c5037720b7d5a3b26dfb476a0b7d4510f1668

General

Target

00daf04ae750c36577eacf65e92c5037720b7d5a3b26dfb476a0b7d4510f1668
Size

112KB
MD5

e50c7a258def2b1d6cdd5277d0cc2921
SHA1

37efbdbfa769f8d98d193c3fd305d69f4f7faed3
SHA256

00daf04ae750c36577eacf65e92c5037720b7d5a3b26dfb476a0b7d4510f1668
SHA512

5bf5a06aba7bd47b5e74bae646a174f59eea45cb688f9a8ebdcd10c8d7d48e01a5f9aceacfe18c3eecfae9067f5ab8945a23ef07b68236c5d2e4a6349b5e7bfe
SSDEEP

3072:lF6F15h/zIn5S1aj+cU9C8hZgXw9aINej:+FjhLI5SG+FP9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00daf04ae750c36577eacf65e92c5037720b7d5a3b26dfb476a0b7d4510f1668

00daf04ae750c36577eacf65e92c5037720b7d5a3b26dfb476a0b7d4510f1668
.exe windows:6 windows

Headers