Overview

overview

10

Static

static

10

32178938d5...19.dll

windows7-x64

10

32178938d5...19.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    32178938d52186030a14cbb19.dll

  • Size

    37KB

  • MD5

    74d876023652002fc403052229adc44e

  • SHA1

    387429a298df48531a3fc2ebd8b58d2c8fb281cb

  • SHA256

    32178938d52186030a14cbb190325fd4ba35bb4947a1db28bc07e76812b006c0

  • SHA512

    e3a879fa54d365682030960b7c45d2ac945545471378c66aa8b7b081f6ef06b258ef789d72646a516de62ba39db8f4827b5bea3005d09795e78e2c8e75febdf7

  • SSDEEP

    768:ZesiLUI0PPZrmzsXAUWjNCHmhzoVBvxamBT8TiuKmLHdJqA7PZj:QRUdrm4fWjNxKBhx7ulZ7x

Score
10/10
gh0strat

Malware Config

Extracted

Family

gh0strat

C2

qq.honker.info

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32178938d52186030a14cbb19.dll
    .dll windows:4 windows x86 arch:x86

    11e3b80bd10c7bd86bb7e7a9f603d969


    Headers

    Imports

    Exports

    Sections