General

  • Target

    654b3336add87eb7a9564a8e6e9ab2b3

  • Size

    280KB

  • MD5

    654b3336add87eb7a9564a8e6e9ab2b3

  • SHA1

    789fa21b44a56cf069b03386096a41f72ac88cf4

  • SHA256

    83ef27a2c48e68c90a0c90728604865ba90e93af449d06c7bfa3a4bc1c253680

  • SHA512

    232ad4e2d53d31b167f51cf7bf6533ebf82542aa7449e2ba48cdfb71a0581a94aad508b9be1d5dc33b374a4b383168a7f43db1e3c387af3a00257172af990145

  • SSDEEP

    6144:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHY6:Dt0VPFfsKAkrbPlY6

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 654b3336add87eb7a9564a8e6e9ab2b3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections