General

  • Target

    07ab8f0db4655e8d5d312687c34a0824

  • Size

    56KB

  • MD5

    07ab8f0db4655e8d5d312687c34a0824

  • SHA1

    afd31094697cf309e6787e3d65f2d1a20cbc02b7

  • SHA256

    72d28749570bc739318f6aa05ddd48072ef439eb7ca96f544a1de03516b4d9b8

  • SHA512

    970795f965bca04d608b43f950a55ff91c95d808905853163f374eaa0e94aec2880af2d8d42b46c2af60ef623e875bd379dd33285ce3ce41e961787aae47e7f6

  • SSDEEP

    1536:mTwROpCV85XHfhVFH/+QMmmh69anTRCoM9X7:mT6wBX/rFfefh6InTSX

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 07ab8f0db4655e8d5d312687c34a0824
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections