Overview

overview

10

Static

static

10

NEAS.06f3f...JC.exe

windows7-x64

10

NEAS.06f3f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.06f3f58793fbf80298eb4fc9e11931e0_JC.exe

  • Size

    286KB

  • MD5

    06f3f58793fbf80298eb4fc9e11931e0

  • SHA1

    994b052f6f882463f66cf97d223bcdb6a10d587d

  • SHA256

    5deb3c6e54b8540def77dfaa6559ed0e4565b96fb2fbdf80ae58af1e1640f38c

  • SHA512

    a4cc924f08f6da0d9454f29bbd3b610914c899a8e8bbaeb29bd3f0f38334e3ac25de26b362d0e2f24f66552e18bb079758e2254d5bb0c18aeb47e24cecc9f4f7

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3I:6t0VPFfsKAkrbPl4

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.06f3f58793fbf80298eb4fc9e11931e0_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections