General

  • Target

    052afd97251672d17faee884f3b2b247

  • Size

    161KB

  • MD5

    052afd97251672d17faee884f3b2b247

  • SHA1

    937390d7e6135df363f3a80d874834f412d6dc37

  • SHA256

    5d0ae8100ad810431c34eea45d2ea4250d0f6bef11f6087818238dd8998e11ff

  • SHA512

    b354d90735a1f15f6297fbf73f3c643af55abee85388072436b3b547d0fd507e8571647d8629456310febcb9378a4bd0471cf044d3527130ee2b240ef7f367b6

  • SSDEEP

    3072:DoUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJH9B5:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJHp

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 052afd97251672d17faee884f3b2b247
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections