General

  • Target

    729a6235cfe9c289ba636efc9b4253c71032a52abf14e9a5986597d1a7a10994

  • Size

    50KB

  • MD5

    86c701bf4130faad315c2ba95e5f88e0

  • SHA1

    870043d81626c189a7c464f6615ba905e590f962

  • SHA256

    729a6235cfe9c289ba636efc9b4253c71032a52abf14e9a5986597d1a7a10994

  • SHA512

    6154fb1d26884b0579b90a4ed29a2dbed7efd478f277b8e771213c7e253104bd5bd1cfbef2a79393f0a6475d5b499a5badce4833c662f3c60938a6a88dd6c8bb

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJJo5/JYH:W5ReWjTrW9rNPgXo1JYH

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 729a6235cfe9c289ba636efc9b4253c71032a52abf14e9a5986597d1a7a10994
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections