General

  • Target

    248da0ebdce74b05d24045905cd66256

  • Size

    287KB

  • MD5

    248da0ebdce74b05d24045905cd66256

  • SHA1

    4cff5c8154e04d3aa53dcfc31c86610affd2dd79

  • SHA256

    75f5255f0bfe3c960ddcd3be50188aed8a630938cd0bf3ac1c57c18a5ba5160b

  • SHA512

    0d88cffc7f5563db5337c63fb4eb5b7d752699b4646c727232b92a2bb7ebdedcab95683822c2e07d317ce50c005dc74696c6b8ea139a1ee144a28a3800028cbc

  • SSDEEP

    6144:22WIL0iU0iWhz4y2EVyA8LgQriOH5ioH0ofUU1XrqAzCwNf:2JIi0iu4VEVy3Lg5O5ioH0H87FC0

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 248da0ebdce74b05d24045905cd66256
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections