Overview

overview

10

Static

static

10

6424397297...18.exe

windows7-x64

10

6424397297...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6424397297f02c07baa9be99314f965c_JaffaCakes118

  • Size

    172KB

  • MD5

    6424397297f02c07baa9be99314f965c

  • SHA1

    edefd1e3c56bab34174171fd67c403db7a91a626

  • SHA256

    6a1252ff0dffccd672de0898212d587d37b416a93772e7aae7f2208572df1326

  • SHA512

    d9f74a45f8d8d6ccf56696afc892ebcf00a73af3311f7ac6a6ab6de7a143bc6d3fc8391d2b92e38834243be5658bc6b98fcdc55e5455648f44c95c37bec79736

  • SSDEEP

    3072:B0SjqZkNEj22Lts55jiPWAVMBMNMs73jFepPNOo+gIyqLkl8KAPgM4/:BtjxAWOzMAFepAo3aLE8KAL6

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6424397297f02c07baa9be99314f965c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections