gh0strat | 283ad396df7b88e6ae2393395647e8d7786fd4cd54cb4957155611e15c1fad98

General

Target

283ad396df7b88e6ae2393395647e8d7786fd4cd54cb4957155611e15c1fad98
Size

112KB
MD5

08c474d3b96de9287533388be749b5ff
SHA1

4ef0074c6bc9ca12ac3e6894b7fdd568c0667559
SHA256

283ad396df7b88e6ae2393395647e8d7786fd4cd54cb4957155611e15c1fad98
SHA512

ccd8c89b6194850fc788110355c503ee85cdcc95c71578dff8e8963766ad86c53a52dc3815e3c7f7b762e74d3a29e92cf11bb20640803ba4e7237cb8d7cc2104
SSDEEP

3072:tF6F15h/zIn5S1aj+cU9C8Fjgvw9aINej:WFjhLI5SG+FJ9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283ad396df7b88e6ae2393395647e8d7786fd4cd54cb4957155611e15c1fad98

283ad396df7b88e6ae2393395647e8d7786fd4cd54cb4957155611e15c1fad98
.exe windows:6 windows

Headers