General

  • Target

    6586ae838a2a3c03a66b858ec68c6775

  • Size

    3.3MB

  • MD5

    6586ae838a2a3c03a66b858ec68c6775

  • SHA1

    b061f64fec2919811f505a5ba22425dbbbb582be

  • SHA256

    cf21ca9f74b450bee82f0ea80208a0d48d76c21d5f019d0df8e4eeac355d3307

  • SHA512

    87843a73adfd7b05a1a6837389f07d3b3af62f8a1cf2d932d33218ea6dbe99f98b2035245928cb4ff4527b41715d0d16e44188d2738c41a4d1741bdb11445eb7

  • SSDEEP

    49152:u9mkhfR5ytatNfc9dVk7vhiSqhG9mu5QR1isRSErIt75RK5812EO0w/Knndun:Ofit4fcGv8hGJ5QjizEoO58QUnO

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6586ae838a2a3c03a66b858ec68c6775
    .rar
  • MGhost/MGhost.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • MGhost/安装说明.url
  • MGhost/新云软件.url
    .url