gh0strat | 286340aea967a0a2660402bba6f19340_NEIKI

General

Target
286340aea967a0a2660402bba6f19340_NEIKI
Size 348KB
Sample240508-t8424adh51
SHA256 4a4164c6f9cba58b96c47faf26244029c23ef940769a9819601961483b96c850
MD5 286340aea967a0a2660402bba6f19340
SHA1 7f9d9d0f9ed14973734f609a629d65a4b8977b82
SHA512 fa663d59001ecad42e1d67ccf43e04a911e65ece81045ed890e40912ff381684b1c13dc640e19dde70e275ed5b85489fdafb5d014e173114e39ed8f03a66a8dc
SSDEEP 6144:MJueTkwOwoWOQ3dwaWB28edeP/deUv80P80Ap8UGwoTGHZOWJkqd0K4rG7eVT0SN:ouLwoZQGpnedeP/deUe1ppGjTGHZRT0R
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286340aea967a0a2660402bba6f19340_NEIKI

SHA256 4a4164c6f9cba58b96c47faf26244029c23ef940769a9819601961483b96c850
MD5 286340aea967a0a2660402bba6f19340
SHA1 7f9d9d0f9ed14973734f609a629d65a4b8977b82
SHA512 fa663d59001ecad42e1d67ccf43e04a911e65ece81045ed890e40912ff381684b1c13dc640e19dde70e275ed5b85489fdafb5d014e173114e39ed8f03a66a8dc
SSDEEP 6144:MJueTkwOwoWOQ3dwaWB28edeP/deUv80P80Ap8UGwoTGHZOWJkqd0K4rG7eVT0SN:ouLwoZQGpnedeP/deUe1ppGjTGHZRT0R
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

188416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths