General

  • Target

    a44329488e0a8c981b5f50a7d71b760e

  • Size

    148KB

  • MD5

    a44329488e0a8c981b5f50a7d71b760e

  • SHA1

    ab1ac7e62671d8f913d590c115ddc5a9afb62ee6

  • SHA256

    61542994890fa7981ca38cbbd9103a081a0c036c9c512506464f772170943b7b

  • SHA512

    1aaaa7be53143b239d96a69d205a0d4aeb625882cb2bf1ca8e4502a520c3907e2c120d9cc52324fbbfb9b4545e894180552fbe785cd784f3cb6088626a246187

  • SSDEEP

    3072:VmSq5+/V/DHOJEcNvCkdXfCxmOqQhST37nTBftKwxnQ:Vm+xPavXVCxmlQhSTLnTBlPxn

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a44329488e0a8c981b5f50a7d71b760e
    .dll regsvr32 windows:4 windows x86 arch:x86

    492d07f9baa4b10ffc7e27d1f903341f


    Headers

    Imports

    Exports

    Sections