General

  • Target

    0b84c814c329fbab1cfa8e0cb362425d

  • Size

    371KB

  • MD5

    0b84c814c329fbab1cfa8e0cb362425d

  • SHA1

    02e4c2a64e4724624f8cf26998c1243d577fdd18

  • SHA256

    70234d24f87cf0cd18daa4d185c0cb3f30220e03e1b813208ffd3779458ef3a9

  • SHA512

    6520884a01a451583128db6626b3c3b87da83dd33612dae163f8b54bce05a79c760862fb965de4414a6fdd49df589dab0aaec1b2705d72880583d13c08947a40

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORdtao8OW5wWA1+:mxjlVJnQiGP/evc2gT1WcN

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b84c814c329fbab1cfa8e0cb362425d
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections