General

  • Target

    eebf49135c1adc6828e7a3899b23238f

  • Size

    149KB

  • MD5

    eebf49135c1adc6828e7a3899b23238f

  • SHA1

    863f25f1f6d66b91675404eb6cf897b825518984

  • SHA256

    19a561743c8f8e16582b5ccda52acf9ff42095ab7ce902f5353186d8261c1516

  • SHA512

    b538b0b4904565359d037c715d2de91bec881204a50e9b366754ca685d7b012575fe12fc9d44740d1d6c3c78e2d9ffa5814bcf8046782b916709a15ae124e2a1

  • SSDEEP

    3072:P2T7uCWOhANdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KAiCbmN:PW7uCWOh4pl2GkGMkSgb8Svlu5KAON

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • eebf49135c1adc6828e7a3899b23238f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections