General

  • Target

    xghk.exe

  • Size

    68KB

  • MD5

    23ae5b23ad69d731d7a80dd015aea3b9

  • SHA1

    20b4f3d184e9772e2b38ce5e98c800ddb4bf18db

  • SHA256

    ac1b378f8477373ead4d963382c446c9e00c284e42cd6189a373a520dabcaf45

  • SHA512

    aaba2adf105528a5d41953de986bcf3e6db629043d457fb5933e1bf7017ce6c4631b14631e58deb31443061bcd47bc0651002142f2288c1f6ac88fb03b9c34fc

  • SSDEEP

    768:BCB8S+OR7dOahyoHokBtqN74W7bZZmYb9PyzcjRlYlwa6NVdkPnJJMIVV:BHJaAoHoc2x7bZoYBAcQlwJdMB

Score
10/10

Malware Config

Signatures

  • RunningRat payload 1 IoCs
  • Runningrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xghk.exe
    .exe windows:4 windows x86 arch:x86

    1b365823829e2ac9bfb0aa5d328240a4


    Headers

    Imports

    Exports

    Sections