General
-
Target
92d1eada419273a87ee66170826f94aab7af63a521bdfc20273620a5bb9e012b.exe
-
Size
208KB
-
MD5
260ffaf122376ce7029f7ea98fe0b721
-
SHA1
aab03027fbc29f0d1151480d388253914e985cff
-
SHA256
92d1eada419273a87ee66170826f94aab7af63a521bdfc20273620a5bb9e012b
-
SHA512
8656b08cf77e1ab728a9e5f822e017bca74ea67231f9ad700d40b91ae6c17a7a218c84b5f0b25e8b5c9bd9ea0b253120e0f51ce786a152618db4c7ac45b9e036
-
SSDEEP
3072:PTeTY1km5WBqwP3gsxQ/Xz7iasfsyC/hX6sxv3pAEAXPWegryrLr:PiTtiWBvOL7t5J5Zp3qpXPWy
Score
10/10
Malware Config
Signatures
-
Detects executables embedding registry key / value combination manipulating RDP / Terminal Services 1 IoCs
-
Detects file containing reversed ASEP Autorun registry keys 1 IoCs
-
Gh0st RAT payload 1 IoCs
-
Gh0strat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
92d1eada419273a87ee66170826f94aab7af63a521bdfc20273620a5bb9e012b.exe
Headers
Sections