Overview

overview

10

Static

static

10

0847f968e8...fa.exe

windows7-x64

10

0847f968e8...fa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0847f968e8e24a8e1dad7f3a3ec06ffa

  • Size

    419KB

  • MD5

    0847f968e8e24a8e1dad7f3a3ec06ffa

  • SHA1

    08cbcee89aa557a5f05b4a47aaeffcc053a7c3bf

  • SHA256

    4b9491ce0cdfc54efcf0411fe031568118bca1e80b1cde76c7ad1ba337c9014b

  • SHA512

    3043b6ae99950697bed5fe3baf22d4d140439919a7d6317efeb7b03a5b431cb6216bcd4985157667bd5fe1a54f31b1fcb89d32d98e80b004dbf746ac96a9be33

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORb0taoOqwiWAoktax:mxjlVJnQiGP/evc2gT1WcgD

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0847f968e8e24a8e1dad7f3a3ec06ffa
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections