General

  • Target

    fdea8b01b2597ceafe6f08b5fd12cc603b1e3ce2037731c0b6defde6935b1ce0

  • Size

    1.9MB

  • MD5

    77b6bf6b1a1add430ba1a5e034ee0861

  • SHA1

    1723ba875962eb0d4d0c5d5c1f4eaeac0ea09354

  • SHA256

    fdea8b01b2597ceafe6f08b5fd12cc603b1e3ce2037731c0b6defde6935b1ce0

  • SHA512

    afccefa47cd354cd28d9cc3a20b9b2bb36b92e70373cc73449eff691e6dc1e00e9e6ae34ca76437f3347149ecf5e9552e463c6b04f04895bf5740ea52897b1f7

  • SSDEEP

    24576:9HokQV5OpXCERExj+fWNsJKXSgvzMn72uub1rIQjIK21gtubGvtt:9IlV5O9C6asASgvQnub1rvUK1Hlt

Score
10/10

Malware Config

Signatures

  • Goshell family
  • Detect GoShell 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdea8b01b2597ceafe6f08b5fd12cc603b1e3ce2037731c0b6defde6935b1ce0
    .exe windows:6 windows x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections