General

  • Target

    a2fc04c06f253a38d36941ebe76f3153

  • Size

    110KB

  • MD5

    a2fc04c06f253a38d36941ebe76f3153

  • SHA1

    1e03bf4980de2dcbb10329e7c8cb13ac6d70391f

  • SHA256

    8338898fcf2ff8c50316d02077510e560e50aadd699d1692818b0bf9c97425af

  • SHA512

    77aa9ffe75bdeaae74a90de8060db1420cf156e7a63855e5d1b4913b4a7aca39b0f214e0ebe7f7e7b15c405b245b0570bd9cdcdadc470c27bcc6de82c22ce3f8

  • SSDEEP

    3072:mz0OixHbZ61iv5Yxqr/OTuYtgVx+ahfViyJ0VGkR:CilQ1S5YIaTWJfVfmVl

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a2fc04c06f253a38d36941ebe76f3153
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections