General

  • Target

    a9d8f7c3c9bafbea6785c54920970db1

  • Size

    122KB

  • MD5

    a9d8f7c3c9bafbea6785c54920970db1

  • SHA1

    652ddad337806f599dee6b56296db0be6cc05752

  • SHA256

    e645c81b1632bc797d04993b127fe87f3855e61283eaa7ae73303de2303e984d

  • SHA512

    cb39cbb084cc9012d16e4fdcba502f0cbc77dd16fcbaa9a47c8565c4e9364a8a2c0ed410f8d8ca6cb54bfaf771c1640903b6f7972a62f59c595c57713bcfd574

  • SSDEEP

    3072:IcNVa6wiraf91JcUcw/HUtpFXCAInZcp:566wf3JRn/0tpRCAaZI

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9d8f7c3c9bafbea6785c54920970db1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections