General

  • Target

    40cd8b1b92af8202b51fe85465c57257

  • Size

    274KB

  • MD5

    40cd8b1b92af8202b51fe85465c57257

  • SHA1

    85a46b76875ad81f2a326e15ebd2d773b987124a

  • SHA256

    1c2eb07924fc7fc002c88e8f4849c281ccf0b27b423557c9410a703e00992627

  • SHA512

    54d140b3d39ffddbb4f1dfb09111146fe0e176e8294207bb4a30236ee3ad03d72187ce1901efb34c56b53672588380d73866cd6b243d1635e6eb4bccd44d58f8

  • SSDEEP

    6144:LGzRxSVtp0l6whGfsKR+zkBpTaa5tJH3w9bHANUTN0:6t0VPFfsKAkrbPlg9bHANUTN0

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40cd8b1b92af8202b51fe85465c57257
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections