Overview

overview

10

Static

static

10

89831c7f5f...18.exe

windows7-x64

10

89831c7f5f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89831c7f5fb0972d45a17119109cdce3_JaffaCakes118

  • Size

    186KB

  • MD5

    89831c7f5fb0972d45a17119109cdce3

  • SHA1

    5fa311a94081f7362812f24ad01890ca143a2e10

  • SHA256

    a81416431dc278f33c90aa8180d9ee691f8caf9c69e28f743aa3480a28b51a04

  • SHA512

    0dab111f24b814d226cdc24388cc272c93bb49633ae7f0a95be70f41f7c3b2a82f858ef2982b84753af0b0fcd75a8836dc0f569076cd33f7d3d6eef7de68f6e7

  • SSDEEP

    3072:6oUGzRVHgCcnV5j9j0lvil2NnGfNGHqRy1zkeS1FpTa3q5tJHYataoK8Or:wGzRxSVtp0l6whGfsKR+zkBpTaa5tJHG

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89831c7f5fb0972d45a17119109cdce3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections