General

  • Target

    122f8f31d59df24591001fee6842a7c1

  • Size

    146KB

  • MD5

    122f8f31d59df24591001fee6842a7c1

  • SHA1

    2b63ff8bdff9859443be59a5e916d7737ea80ab9

  • SHA256

    6b7f647a9203d0b4dfa1d706991b56fdb802bf455d20605d38662c343df804d7

  • SHA512

    b5c8315b223c6f527042aa01987425855215fbd871cf7e5e6b6f21ea4ce928f0732748a5040f85c35300560d5cebc1204ce0d2f9c6f156aee1554fd7c301e244

  • SSDEEP

    3072:13tTGB+Iry8uIqnYCtlrKttHkoIIuZkfibqCHtrY:13tapW8HqLlwKodkkqbLZ

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 122f8f31d59df24591001fee6842a7c1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections