General

  • Target

    NEAS.048699f54fda4e89e1054625610c36b0.exe

  • Size

    286KB

  • MD5

    048699f54fda4e89e1054625610c36b0

  • SHA1

    f8d6482286da9319c51deaf8bf92695693579ec3

  • SHA256

    334c5501aa0ed7ecc15ef0e8f1033869b68012d084496068a7a48be8de428efb

  • SHA512

    811c17a7b8632abb85cf3da8c3563c0b7cb5379b9a336e63a97d56926fe42ba0d5bd71f2ae26564e0bd817857d3fa8b4e249adf73524bddfe03202c7846b2229

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH38:6t0VPFfsKAkrbPls

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.048699f54fda4e89e1054625610c36b0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections