General

  • Target

    220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

  • Size

    49KB

  • MD5

    8079d4c9468dc504276f319e207c8dfd

  • SHA1

    daf585bfc4879193fd71a1508cbfaa5d773e2a2a

  • SHA256

    220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f

  • SHA512

    88480ab93d7509f92280adc7a42113cc4128f43b7e80ab670a2dcee81569034fce114657aee6a31682fb83b3c1b4daefcdd0f8495c660d384c17db0b133d4bb7

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUhgJOSJYHB9ElHS:Cn7zBjPp1H9ovoDUgJNJYHBWZS

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

cf1549064127.f3322.net

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 220a7e6f68d90e0f3a848e9b6efd61334587c519271ff67a279c6795bcdba61f
    .dll windows:4 windows x86 arch:x86

    17934126e1b968a66c8bb9995517aa55


    Headers

    Imports

    Exports

    Sections