General

  • Target

    dcf5fb9d9cb0c603a7eadbda13d9e4dfebe571d4ea4eee1aad6704039aff1bb5

  • Size

    51KB

  • MD5

    20a8800500cbfeb5fdd590375e0ce7ef

  • SHA1

    fded891a2395a940fdb41ac292f4e6b641fc3770

  • SHA256

    dcf5fb9d9cb0c603a7eadbda13d9e4dfebe571d4ea4eee1aad6704039aff1bb5

  • SHA512

    26febe79bcdc87eeb3e8fb5b4b441b6a6e3539635ebf7b97e83e8ca658364d7fee3138eb60460e6799381aed2fd480a2cc953cd1fa439db3fb808d5e77723ff7

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboQJYH5

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcf5fb9d9cb0c603a7eadbda13d9e4dfebe571d4ea4eee1aad6704039aff1bb5
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections