General

  • Target

    29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2

  • Size

    112KB

  • MD5

    d3d954ba67ad352761832a8ce359aeb9

  • SHA1

    dd8bc27055df704dbc4a199a8729fbd503acdff8

  • SHA256

    29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2

  • SHA512

    30eced5946c2c7b1d35e4938ba5dadd1f0b1026f893121572d3d1c2e3ed004aefe8966dbc3a42b49483266c3f1fd04ecee87af1a8470f0a500e483a5c3c71292

  • SSDEEP

    3072:tF6F15h/zIn5S1aj+cU9C8DJgvw9aINej:WFjhLI5SG+Fh9aIA

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 29ecd5812e02affedf6bc89864f91f532e9e194090c8e3789e5ae074ba6e66e2
    .exe windows:6 windows


    Headers