General

  • Target

    a0f09447fc145454730b18efcb31282a

  • Size

    69KB

  • MD5

    a0f09447fc145454730b18efcb31282a

  • SHA1

    32fa91815e82d91697e46d563ef226a8dde0f172

  • SHA256

    40bb0ee433251c33312a10668938ce1791f37f09bcaa5928af8a54f03d96d669

  • SHA512

    0e6f4f7cbb97ad4d8d576f908a13b9ca7912c39eacb0a7feab26f52d5db1e3134f4e8d0201f42181b4c5d0230c3181d96e661e1cba1f62f22b0ded3a84e90ee9

  • SSDEEP

    1536:I9GyrJcd/yfc9SmOtFqxj7/0Ms03U8jByQH/179b:IIyrJi/Ec9SrF2f0103U8jByQf179

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0f09447fc145454730b18efcb31282a
    .dll windows:4 windows x86 arch:x86

    40641d6af2fbde034f02ef16833d6d23


    Headers

    Imports

    Exports

    Sections

  • .data
  • .rdata
  • .reloc
  • .rsrc/BITMAP/103.bmp
  • .rsrc/MANIFEST/1
    .xml
  • .rsrc/MENU/102
  • .rsrc/version.txt
  • .text
  • 1
  • 14
  • 3
  • 4
  • 5
  • 8