General

  • Target

    1f45ece3120bfb32ee9dadf67ebf969d

  • Size

    288KB

  • MD5

    1f45ece3120bfb32ee9dadf67ebf969d

  • SHA1

    6ea67baf181979192b9a5cc249958e20ff18ac94

  • SHA256

    40aa99d3155310190978e4b3197fc6943a85394b1ede116545c0185bb4fcf416

  • SHA512

    d6c20f3255abdeff9688064ad2ec0c3645eef9555811bd9fe1e1bd4ac56c9a43bf023aa4be91ed4d32fb29916c0f8fed06b5745310ee3c677f220a3726b45ee8

  • SSDEEP

    3072:7oUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHTwiWAohwiWAoK:TGzRxSVtp0l6whGfsKR+zkBpTaa5tJHE

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f45ece3120bfb32ee9dadf67ebf969d
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections