General

  • Target

    NEAS.053338f78b85287fafa386a8000c60b0.exe

  • Size

    286KB

  • MD5

    053338f78b85287fafa386a8000c60b0

  • SHA1

    8a3e61c56da8ab4d3ec7164c9bf5a3b7cf51482e

  • SHA256

    deffeaa14b7a248c2ef80c5c606453a62d99aa59b09c5637f55c9e03b01f75c1

  • SHA512

    261cb019b91da112472ad39bd1a744bfb5c9b0ab4997d8da2d3ba0f45d0b93e7f7069c37f9625575553cce609f9671627ec5fbe5d17b0ce282ad6cea65da0816

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3j:6t0VPFfsKAkrbPlT

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.053338f78b85287fafa386a8000c60b0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections