General

  • Target

    40c8ae9a60e7244d47f5e4ad67907c7f

  • Size

    56KB

  • MD5

    40c8ae9a60e7244d47f5e4ad67907c7f

  • SHA1

    2d1b491014db3cb8767abbc0f85ea70cbfaf91f4

  • SHA256

    1695f115accb674b81c1ddbf573aa58a561a1adf41476c3e0ef693d8790ae03a

  • SHA512

    dc890f8dc575950c22d8ef64ba862b16372909b2da0dd58d697f84de90782cdd9fa4f011a676c4583ecac9a45b1d1deb5257f8dc9e30dc1e808ca8e03059a286

  • SSDEEP

    1536:n4P77TnxG7l5D0KBp/rUIQspwjz0NzlFk5cr:nm7TnxG7l5DdtQspdqc

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 40c8ae9a60e7244d47f5e4ad67907c7f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections