gh0strat | 5f781f0ddf49791025834d0d31f26557a0cd670857532176b7bb298b988c013e

General

Target

5f781f0ddf49791025834d0d31f26557a0cd670857532176b7bb298b988c013e
Size

112KB
MD5

1ddec674e0f026f8f59a5b2ecb857659
SHA1

1db6d02d644df03a38b7d71ecf3226cf05b761ce
SHA256

5f781f0ddf49791025834d0d31f26557a0cd670857532176b7bb298b988c013e
SHA512

12810275aad7cccf1fe55e3a72f7ea60ef1a9ab7ab560e942bd49219ddecd0514814a4608fb4ca064644e7bf3e58c96f82531a586f3f0db8f21a8c90f748d739
SSDEEP

3072:5F6F15h/zIn5S1aj+cU9C8bHgjw9aINej:qFjhLI5SG+FH9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f781f0ddf49791025834d0d31f26557a0cd670857532176b7bb298b988c013e

5f781f0ddf49791025834d0d31f26557a0cd670857532176b7bb298b988c013e
.exe windows:6 windows

Headers