General

  • Target

    0cea01a8a4723f915329efe81ae32a71

  • Size

    329KB

  • MD5

    0cea01a8a4723f915329efe81ae32a71

  • SHA1

    07a1ddb2e735cb70c25e195eb84eb5470a40d621

  • SHA256

    6ddd0e5824f278587250708c05a3228ee7bec75b57f3be0f6574c8c90306182c

  • SHA512

    f35879f9fba242a7aa648c88e910d8e329afb1c32582c3294204159b261918f1efc6c6405102881a5d10c22bfcff991fc202adcfadcc19ccbade97e5e1127688

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORhSrmz:mxjlVJnQiGP/evc2gT1Wchmz

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cea01a8a4723f915329efe81ae32a71
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections