gh0strat | c2dc88bd65e1242d8afc11510c74ac8455f96e96d637538da3543c1d1c5029d3

General

Target

c2dc88bd65e1242d8afc11510c74ac8455f96e96d637538da3543c1d1c5029d3
Size

112KB
MD5

0ad2d90e96398f911dc68deec4c864a3
SHA1

fc90157d4d9aed6acd3d3cb748c969266f52c508
SHA256

c2dc88bd65e1242d8afc11510c74ac8455f96e96d637538da3543c1d1c5029d3
SHA512

5510407a898b361d4b7364131dd9e32b59a1da730fcfdcb96dbed3a3295018f061fdc625c87f315dee49b187599e2e7b9c1eb3825bab2e89cbbd8d55cbf18706
SSDEEP

3072:zF6F15h/zIn5S1aj+cU9C8Wtg5w9aINej:8FjhLI5SG+F89aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2dc88bd65e1242d8afc11510c74ac8455f96e96d637538da3543c1d1c5029d3

c2dc88bd65e1242d8afc11510c74ac8455f96e96d637538da3543c1d1c5029d3
.exe windows:6 windows

Headers