General

  • Target

    NEAS.0de959ad8d9b06c3a970cde7ab834eb0_JC.exe

  • Size

    286KB

  • MD5

    0de959ad8d9b06c3a970cde7ab834eb0

  • SHA1

    f9f7a69013312bfcbb47fcd50c04524944e69477

  • SHA256

    48698d63897ee9cf0aa6c11b8b05096633e18e48d11328d1bca75508c07ce101

  • SHA512

    7c4ab4669b1dffc30ffc4001b252fccee1f0a3498e97f4b133ebdb199400194e02df2971e8008a4a4544f4edc9a2da77dca2c2621c9972bcad718a7dd9b4d6c6

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH31:6t0VPFfsKAkrbPll

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0de959ad8d9b06c3a970cde7ab834eb0_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections