Overview

overview

10

Static

static

10

251e48f39e...18.exe

windows7-x64

10

251e48f39e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    251e48f39ed3faeb67c24bf226706099_JaffaCakes118

  • Size

    218KB

  • MD5

    251e48f39ed3faeb67c24bf226706099

  • SHA1

    683361cbb49a9bdb59025ac84e7d5e1e578e2921

  • SHA256

    462813b03b0b91212ece71bc711693f676bdf3c05e4046d234bb2f0ef09f2a7e

  • SHA512

    aecf01e15b6a516cbbfd3de6767817e38441dce9ca0b68fe0bd60a63bde4aed4759fc92077e573ef4ced62f6a185a939bcdbbc4cc37744d67b1d945cb8fa485f

  • SSDEEP

    3072:6oUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHpo1:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHg

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 251e48f39ed3faeb67c24bf226706099_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections