gh0strat | adc83546918d6d734e1cdba98ff333b3cfac455e3613971b5ffca815c29776a2

General

Target
adc83546918d6d734e1cdba98ff333b3cfac455e3613971b5ffca815c29776a2
Size 268KB
Sample240423-e4k14ada8z
SHA256 adc83546918d6d734e1cdba98ff333b3cfac455e3613971b5ffca815c29776a2
MD5 5c3d7aa2358ae37aee12d7a5b689238a
SHA1 e77605176d9dec8c78e02a5144884608566e4268
SHA512 867af85b87378c270f47d23771cdf8f9d8f1729e5f5e8f4a1a219fcf07e7d2cc2f47e2b1b7ed37ed2a589168d35ef9a9d54c75f7d59d525ae7204f10c522c83a
SSDEEP 6144:B2Rnh5EsIm2EJ7RNYQRcyXthY09inGogju:Beh5EsIYJdNPd9G090Niu
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adc83546918d6d734e1cdba98ff333b3cfac455e3613971b5ffca815c29776a2

SHA256 adc83546918d6d734e1cdba98ff333b3cfac455e3613971b5ffca815c29776a2
MD5 5c3d7aa2358ae37aee12d7a5b689238a
SHA1 e77605176d9dec8c78e02a5144884608566e4268
SHA512 867af85b87378c270f47d23771cdf8f9d8f1729e5f5e8f4a1a219fcf07e7d2cc2f47e2b1b7ed37ed2a589168d35ef9a9d54c75f7d59d525ae7204f10c522c83a
SSDEEP 6144:B2Rnh5EsIm2EJ7RNYQRcyXthY09inGogju:Beh5EsIYJdNPd9G090Niu
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

116609

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths