General

  • Target

    288440a7b5611a7666db863a2eb963bf

  • Size

    39KB

  • MD5

    288440a7b5611a7666db863a2eb963bf

  • SHA1

    2330ca7b42e663d369f0cc5fb4976a054024e0c8

  • SHA256

    e83f7510af292713721990a3b97e3a447312a338bd29b73a473c5ec6a4874871

  • SHA512

    a87000aa3add4ee10280d8e0962bbf5b673bd06c148dea5dc7a10cf930ef7fc07c01f77a976e015fff3dd536e50d384b9d86c68107d1804d1401a3b31629818d

  • SSDEEP

    768:hJue1m2C5UZitgYBZxlRo+bAsbHkQ25dK4OaybdefE22:hce1m2CbgWZxfo+sWEQidHPh92

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 288440a7b5611a7666db863a2eb963bf
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections