Overview

overview

10

Static

static

10

ec0b2cdeba...02.dll

windows7-x64

10

ec0b2cdeba...02.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec0b2cdebae81653b5ffebc2b0f8bf96992178ac388e79308f57fee402ff0f02

  • Size

    51KB

  • MD5

    a417cb20f3faba4ccb78092494599cef

  • SHA1

    4892f1f4def50d9bef4e6d81de034105a2f5d1ad

  • SHA256

    ec0b2cdebae81653b5ffebc2b0f8bf96992178ac388e79308f57fee402ff0f02

  • SHA512

    f89513475f0707feafdc55d58e72b99a94975547e12a873b1e68b6cc696bf427a3204b557a7178b8cd79876a59ed7e324848822d597157f377a3d428f9d7de90

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frVoLZJYH5:1dWubF3n9S91BF3fho9JYH5

Score
10/10
gh0strat

Malware Config

Extracted

Family

gh0strat

C2

kinh.xmcxmr.com

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec0b2cdebae81653b5ffebc2b0f8bf96992178ac388e79308f57fee402ff0f02
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections