General

  • Target

    b5e38c045120d04600a249bc02827957

  • Size

    61KB

  • MD5

    b5e38c045120d04600a249bc02827957

  • SHA1

    f36fd9ab1963389e3818e94df8678b5b88f018ae

  • SHA256

    98dd82bd2c146f0e076b5f22a907f2b80c3f8aae8fc848a023e6e5120e9befbf

  • SHA512

    61d3d8b472ef4a4feaa0c22281c4883ab5a4986c6bca8ee98bb07f683d2605a6019d368d4db0b37141912f889f76b03a9edc5764042345aea9c1be8c2967de7d

  • SSDEEP

    1536:quM5itRrErRlN8Bx5ZBNQD0Cs8/i13odvtI8rkLMF:G+2rRlN87NxYGWvtBrkLs

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5e38c045120d04600a249bc02827957
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections