General

  • Target

    server.dll

  • Size

    84KB

  • MD5

    9964bcc2c7f0a5504420028d67cf04f7

  • SHA1

    c5babd476cf4198cb126b2f3024423dc24ec84fb

  • SHA256

    d40194a9c1e354efac17484fd53659b8273bf7da2e513ae1b413049b694a2f55

  • SHA512

    5ae9a888ba703f2d15fea25c5eb4fa6dc9f5e82e1729d86d74f7d7e8b1713dcdb2540570f1aadf15cbfc9a1b51a8df85ad3ee6abd3ab6658079ca2e8eedb7ddc

  • SSDEEP

    1536:YTsenhY8kwtuwL7hSm1Rh+wIOdnToIfAUfepGHE:UsEY8mwnhS1mVTBfAUfnHE

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

103.108.67.132

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • server.dll
    .dll windows:4 windows x86 arch:x86

    2221c0107b5e2205969c1e2018e65d34


    Headers

    Imports

    Exports

    Sections