General

  • Target

    df0d019d28e898d79bc0856792fe1f72

  • Size

    155KB

  • MD5

    df0d019d28e898d79bc0856792fe1f72

  • SHA1

    e7216bc366bc67b567dc341a64e4341d10d11703

  • SHA256

    1f0dca0807e591bd65dd62f975e91fea9b294e76b5f82d6b536677acf570e67c

  • SHA512

    aa1fa37a5079195ad85de0341fbc8997e417fd4debe816a8824a6e27c68691cf7cc77b5b959bf51e8c2a10717788ac959d320d530c79a3622d1a4f593ade713f

  • SSDEEP

    3072:MORtKm6tPvjUosLefKycXI/vthPscTBftp5pnVP3W:NRz6t1sLeCDI//PscTBlpjnN3W

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df0d019d28e898d79bc0856792fe1f72
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections