General

  • Target

    NEAS.0df3f31ffe49d359773068b21f844a60_JC.exe

  • Size

    286KB

  • MD5

    0df3f31ffe49d359773068b21f844a60

  • SHA1

    d001e57c31e1bb15db59cd45c8d3836ab7c53690

  • SHA256

    11e944ef3b867e90e115403e7284b0dd992516a9ba0c29e93a7503e5ff399209

  • SHA512

    b8b6170173524d773cb1e1a7cd59bef1735690b73b5d27f3c5e2062a99c154a24a229f4cd97c9410c4e94d97e749d5ea62ea16366439175d6aa0640f63d94c4f

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3o:6t0VPFfsKAkrbPlY

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0df3f31ffe49d359773068b21f844a60_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections