General

  • Target

    22698410e6556816818d0f09f4929217

  • Size

    373KB

  • MD5

    22698410e6556816818d0f09f4929217

  • SHA1

    a362f1d2db489a63d3849f1b1ec90d32d24092b7

  • SHA256

    d394b472b7be72dbcadcd87654f4e21dc0a05541be53873a77e1f8f616f537a4

  • SHA512

    dcc92a1680333c313b7724a3573de9501ca976b6e9a3978f41be09f2c47323637be7fa730bb48f4ae29ea4c983727d9465fac635df5bb5c453f109f2ed79d8dc

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORrotaoK8OJ7:mxjlVJnQiGP/evc2gT1WcSd

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 22698410e6556816818d0f09f4929217
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections