gh0strat | 2ffd5eea27424cbed83906d636a1fc28f51b4f1c1fa0d1f6f650db0b769daa34

General

Target

2ffd5eea27424cbed83906d636a1fc28f51b4f1c1fa0d1f6f650db0b769daa34
Size

112KB
MD5

c6adc69e09271202eb4b445e3533562f
SHA1

14de390630d7897f276b688bee7f32c36c05dad0
SHA256

2ffd5eea27424cbed83906d636a1fc28f51b4f1c1fa0d1f6f650db0b769daa34
SHA512

99e91d8af620e26a59a0ff7ea6e0d2a985eb5dda5fa6853cd0e0b3aaf800fee538641cf7e4ef51d00ac815e17bfe06e18c59a56ea7fa21bfbf31aab3231f8e37
SSDEEP

3072:FF6F15h/zIn5S1aj+cU9C8VjgXw9aINej:eFjhLI5SG+F99aIA

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ffd5eea27424cbed83906d636a1fc28f51b4f1c1fa0d1f6f650db0b769daa34

2ffd5eea27424cbed83906d636a1fc28f51b4f1c1fa0d1f6f650db0b769daa34
.exe windows:6 windows

Headers