Overview

overview

10

Static

static

10

d56ae9f782...9d.dll

windows7-x64

10

d56ae9f782...9d.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d56ae9f782b6bfa97eceb703948410031318ca5bf33c7cf455a1b7e2f94e7d9d

  • Size

    51KB

  • MD5

    3a650cad8aee66cff2c5a46c50806739

  • SHA1

    a2daf0f3380b297d3de1d8670b6defd5414caaeb

  • SHA256

    d56ae9f782b6bfa97eceb703948410031318ca5bf33c7cf455a1b7e2f94e7d9d

  • SHA512

    2afdcfd88e4fd0b4315f903427a3ab0e38c5dd034b87b510c2959aa65a1e640b73c7a9ca000265e60d036ba393e1caf33398aa507a1aa00bbd3680b61c0e3ec0

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frjoLtJYH5:1dWubF3n9S91BF3fPoZJYH5

Score
10/10
gh0strat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d56ae9f782b6bfa97eceb703948410031318ca5bf33c7cf455a1b7e2f94e7d9d
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections