General

  • Target

    88567dde0accadfec71ac7c76eedc41871a2a3655d6fac01ec9d605056313c51

  • Size

    899KB

  • MD5

    f81c73f6811807d20134ba3a59db6074

  • SHA1

    00af59f605469d2ce4230a6de00c67cb0db29efd

  • SHA256

    88567dde0accadfec71ac7c76eedc41871a2a3655d6fac01ec9d605056313c51

  • SHA512

    91629a1d91cc728fdbfa0f3c7c367d843c84eb67abaa126bedda34b5ed3a26a2feceafa3b6e6b208c3d7c3b4acde4ccdf4d7c766f29543b3e82cb18802f97b59

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88567dde0accadfec71ac7c76eedc41871a2a3655d6fac01ec9d605056313c51
    .dll windows:4 windows x86 arch:x86

    ae118f3d7fe149b456ac30484c6830f8


    Headers

    Imports

    Exports

    Sections