Overview

overview

10

Static

static

10

b4267022ad...fe.exe

windows7-x64

10

b4267022ad...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4267022adc831870f7b41fba8d582fe

  • Size

    56KB

  • MD5

    b4267022adc831870f7b41fba8d582fe

  • SHA1

    edf72c534d0655ec235f147352fdc87ff996875c

  • SHA256

    434f36b52b75d35a665acdb522f9e1bc70f55a2cfb753f74fac3f78721f2bb1f

  • SHA512

    50bd0938f1e2db2f0b8ba9424ab22f22628ab281e382cfe129d11e9bbd2f581ae8a4a45a01f07bdfca96d7a4407b4681cecf733068e69df7e2219b6b50df6f67

  • SSDEEP

    768:wnsc4CgCAUvL7S1dwpIxwOvghBONNZi6AWt43AXANj6V34OyQQ9rx1FRD+BrBkfn:wnt4b1aoj9bfkK34Os1uBrG

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4267022adc831870f7b41fba8d582fe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections