General

  • Target

    NEAS.f4bbec2289a6565f6543e77a83b3c5e0.exe

  • Size

    439KB

  • MD5

    f4bbec2289a6565f6543e77a83b3c5e0

  • SHA1

    ad2179a3549d65384e073049960b4ea77288f0e0

  • SHA256

    c1abaa530351fd26821b83c5031ef506d6988eb5adfd7bb32278b7860343d6d0

  • SHA512

    46a1476fb73aca448b5417fdb266b304c8d5f846f21adfb0a63a9271538b419b77731aa989d01f33571364d406fc026a40da6daa2411c2d1f26e99229051b5b3

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcOR7itaoK8wU38oK8O9:mxjlVJnQiGP/evc2gT1Wcoe3Q

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f4bbec2289a6565f6543e77a83b3c5e0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections