General

  • Target

    0aa1e8e2639ddf6ab7e32ce5a01ec1d5

  • Size

    281KB

  • MD5

    0aa1e8e2639ddf6ab7e32ce5a01ec1d5

  • SHA1

    8142017db9e887d044756497568d130a76129974

  • SHA256

    ec0117314eb7d3d5ebe25110c5389e555406e509af04c03bc8113ea05208fc50

  • SHA512

    bd13292a55215af57dc54685a21d852fa645fc944d0ceffffaf5f01e0dc418f3562d57293cbbe584a2920ec0ceec98115d328cb6030ddd13c424f9e046dbc485

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHY0:Dt0VPFfsKAkrbPlY0

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0aa1e8e2639ddf6ab7e32ce5a01ec1d5
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections