General

  • Target

    1e3ee82433fb751610e4ebf187257ab1

  • Size

    99KB

  • MD5

    1e3ee82433fb751610e4ebf187257ab1

  • SHA1

    790dcb72a80a9981b857408a9da0d557cb246062

  • SHA256

    cb76752144c281be0862a0e87bbade83ba2c6a50789086c9972dc1dde6fd8ba5

  • SHA512

    d153b26941efbbb444e0cb2223e9a03ebda4bcab18c38c1e6142d040f6b9f0e606880b42904f4ef0dc349e9d3e28265fdb2afe16c62eb8c06fdde02d0d16257d

  • SSDEEP

    1536:yFo6En8vDuUvJcHEl4c8vUmTJ8L7B5YJBFUadcdIZuslESrUVnmjv73PYKtl3gCr:Eo6E8vJZJ8cmd/JBNZu+zamjDAbE

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e3ee82433fb751610e4ebf187257ab1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections