General
-
Target
02dddeded898285428fcb98bf9477cb2d6dae0a95d8ba12227eeccd9c108c651
-
Size
204KB
-
MD5
1b51ed59c6c6c0ead15c71a0f5aaf7c9
-
SHA1
0e1042f061d3d6f88cd106d7f2510de12c8c7a85
-
SHA256
02dddeded898285428fcb98bf9477cb2d6dae0a95d8ba12227eeccd9c108c651
-
SHA512
7222dfec54f3f3172c5d2b465b3532eb1fd9f7f1196407ad21226067c12ca9bde379ee1e17ec933434633a78520ab714348f4a473cc949c8c73203e785c008cd
-
SSDEEP
3072:4TeTY1Em5WBqwP3fsRQ/Xz7iastKyC/hX62xv37ntmefwcx:4iTViWB0uL7thJ57p37tYK
Score
10/10
Malware Config
Signatures
-
Detects executables embedding registry key / value combination manipulating RDP / Terminal Services 1 IoCs
-
Detects file containing reversed ASEP Autorun registry keys 1 IoCs
-
Gh0st RAT payload 1 IoCs
-
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
02dddeded898285428fcb98bf9477cb2d6dae0a95d8ba12227eeccd9c108c651
Headers
Sections