General

  • Target

    492fb7a5f2f6a7e83c3300636eb66adb.exe

  • Size

    955KB

  • MD5

    492fb7a5f2f6a7e83c3300636eb66adb

  • SHA1

    01c3cf906ca9de97ee38b5c945190ce3ef687bf1

  • SHA256

    5f626b2f633cf17560bff32a4b9ec52f8d73c6b2714ce3d42f571b2bd5d421e6

  • SHA512

    d3ce10516a28d2f042acfdc2a72f21b4e0a8f287d432ba9faad11407e1dece7f805450002e2dfd3904258e052448b50a1b47db0047d900ca25efd3b19a0bce9f

  • SSDEEP

    6144:e22NXDJlAghv3r+T7wP9xOtWhpjiADPbkRJPMZu5Fl9zI:cXDJlAghv3r+TsP9EtWhpjiAbATMM5FA

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 492fb7a5f2f6a7e83c3300636eb66adb.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections