General

  • Target

    1a55bc212b09f610842c4cbd9272d72f5c99b3673a4b463ed1fde01dff538152

  • Size

    84KB

  • MD5

    d6c85de051700ef276cda57d75f1555a

  • SHA1

    274371a07fdc9435b2ea04ab862784f6b919732a

  • SHA256

    1a55bc212b09f610842c4cbd9272d72f5c99b3673a4b463ed1fde01dff538152

  • SHA512

    e566442ff36be1b4da1e3b485cbb1374261cf392b6fb6f4b6a13c04eeb5cff819162f8ed9b07638ff6b637098a81d457937cc3d99861c37eb5f0885ece8b9012

  • SSDEEP

    1536:YTsenhY8kwtuwL7hSm1Rh+wIOdnToIfAUfe7GHE:UsEY8mwnhS1mVTBfAUfVHE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

127.0.0.1

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a55bc212b09f610842c4cbd9272d72f5c99b3673a4b463ed1fde01dff538152
    .dll windows:4 windows x86 arch:x86

    2221c0107b5e2205969c1e2018e65d34


    Headers

    Imports

    Exports

    Sections