General

  • Target

    NEAS.0ca7672b6c6ee4ed16a73a7a9bbc4700_JC.exe

  • Size

    286KB

  • MD5

    0ca7672b6c6ee4ed16a73a7a9bbc4700

  • SHA1

    c6d6b11b0b9bef36b5332078b5a9233427fcb51a

  • SHA256

    f1eb5129a9fc423bd45e143b1705e6b5b97b9c7978271c1801167b657f8e7074

  • SHA512

    13ec7f33e1d8345f44b5500010930fd6741a6959bfe5a1ce6ca502b07c40182653020e0fe53db91610f00143dff46fe1f3ccd6a6f813908437d4ff3c42be0f8f

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3Y:6t0VPFfsKAkrbPlI

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0ca7672b6c6ee4ed16a73a7a9bbc4700_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections