gh0strat | 1d42ca92cfd228bdfff9b94ba62e02415ee7efe396d90fbb366bfaf414bacd6d

General

Target

1d42ca92cfd228bdfff9b94ba62e02415ee7efe396d90fbb366bfaf414bacd6d
Size

112KB
MD5

3e9f9bfb8e07612974f12d1833ca298f
SHA1

ea9640ef43498cac84f6ba5bd6427b660ae16365
SHA256

1d42ca92cfd228bdfff9b94ba62e02415ee7efe396d90fbb366bfaf414bacd6d
SHA512

1b1315c3d9aae539e36b2dfd85c48174dccb4e96d9cf8c167eaf92b0910ff64e1a49b9dde01c010e059363e97a25aa08e8f5ffc13e4643d402bf3864e496c45f
SSDEEP

3072:FF6F15h/zIn5S1aj+cU9C8BLgXw9aINej:eFjhLI5SG+Ft9aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d42ca92cfd228bdfff9b94ba62e02415ee7efe396d90fbb366bfaf414bacd6d

1d42ca92cfd228bdfff9b94ba62e02415ee7efe396d90fbb366bfaf414bacd6d
.exe windows:6 windows

Headers