Overview

overview

10

Static

static

10

468d52608c...20.exe

windows7-x64

10

468d52608c...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    468d52608c8be7879a61ab5cc759fc20.exe

  • Size

    148KB

  • MD5

    468d52608c8be7879a61ab5cc759fc20

  • SHA1

    75c0fc9c18fba436d188ee116b3b269a382a054e

  • SHA256

    e2ac2493812c1d2608157cb145fe9a54b973b5d526c68357f45ea828b846b560

  • SHA512

    eb5c95c00bfb85e3a1931ecd6814cd59bac630e9c2d974033b37081ec8b886006b3dace0235d9166fbbbae90b4b6cd803a4ea9a362fbf2adcb0244653f545238

  • SSDEEP

    3072:TiJa7pw6mhfduX1SIb2koTAkk98bZ4JBa1QULuoZWOvkdO:+J7hf07bVDl9oiBOf9ZWW

Score
10/10
gh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 468d52608c8be7879a61ab5cc759fc20.exe
    .exe windows:4 windows x86 arch:x86

    03f2c2376dbaab48c69a23e5f572970b


    Headers

    Imports

    Sections