General

  • Target

    261ae97f53348a9ad00c6642af398d3f

  • Size

    442KB

  • MD5

    261ae97f53348a9ad00c6642af398d3f

  • SHA1

    19338e847b739215709506c89ebe855ea2f7ad36

  • SHA256

    6a033e66c7e245ef13e0c87f87604cb5ad92a251e63e705136b89eafdd55fd99

  • SHA512

    b0236d8bd7326832c0f7e8d1f4dd5bc8c6a693bc48228d6df34f599d707c8b7cdfe64c2554e6fc7633fbb50693126a0acfe9453d838010433d9dbe8c0c8ab2e0

  • SSDEEP

    3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcOR7taK8OwlwiWA2HAS:mxjlVJnQiGP/evc2gT1WcwHANUTNt

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 261ae97f53348a9ad00c6642af398d3f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections