General

  • Target

    NEAS.0a31c2ad4a10ddf5db314fbdbbb45530_JC.exe

  • Size

    286KB

  • MD5

    0a31c2ad4a10ddf5db314fbdbbb45530

  • SHA1

    3dc647328440d8361bd3c3efd9c18acd7d751333

  • SHA256

    3de501c51cbc6eb1d77c34992cec9ea61b44460b6cb494856d4b8e305d1a4240

  • SHA512

    f1bfa0ab4fb21e54a9fd5f29bedae3d5cbaf40dd5767b4077d205f8151e185dd5fd9341437a7d26eb7f092f0407b406e2fb40047c8d7b9b6ddb3a8b1e24d08f4

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3C:6t0VPFfsKAkrbPly

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0a31c2ad4a10ddf5db314fbdbbb45530_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections