gh0strat | 678ae8fb06d43ef94cf2f90b676259e85aa7f3d2b3d803a5f57ce4efa7faace1

General

Target

678ae8fb06d43ef94cf2f90b676259e85aa7f3d2b3d803a5f57ce4efa7faace1
Size

112KB
MD5

1cd4c32be091d7bf9b551dbe4a686e95
SHA1

da30443d7b5c7ec9718033eb59fefcb096cd4d5f
SHA256

678ae8fb06d43ef94cf2f90b676259e85aa7f3d2b3d803a5f57ce4efa7faace1
SHA512

9e56a8c5ae95c703d33279bb54faa2189f33239e7efd7ad41cddd41dc8e0c160b3e0bb961aa51d407062da99aba816db8b663f7b327cbf71ab439c42d53f417f
SSDEEP

3072:IF6F15h/zIn5S1aj+cU9C8C3gzw9aINej:XFjhLI5SG+Fw9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
678ae8fb06d43ef94cf2f90b676259e85aa7f3d2b3d803a5f57ce4efa7faace1

678ae8fb06d43ef94cf2f90b676259e85aa7f3d2b3d803a5f57ce4efa7faace1
.exe windows:6 windows

Headers